Prasad J Pandit 007cd223de net: rocker: fix an incorrect array bounds check ...

While processing transmit(tx) descriptors in 'tx_consume' routine
the switch emulator suffers from an off-by-one error, if a
descriptor was to have more than allowed(ROCKER_TX_FRAGS_MAX=16)
fragments. Fix an incorrect bounds check to avoid it.

Reported-by: Qinghao Tang <luodalongde@gmail.com>
Cc: qemu-stable@nongnu.org
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>

2016-01-11 11:01:35 +08:00

..

fsl_etsec

typofixes - v4

2015-09-11 10:45:43 +03:00

rocker

net: rocker: fix an incorrect array bounds check

2016-01-11 11:01:35 +08:00

allwinner_emac.c

net: remove all cleanup methods from NIC NetClientInfos

2015-01-12 10:16:23 +00:00

cadence_gem.c

net: cadence_gem: Set initial MAC address

2015-10-27 10:30:30 +08:00

dp8393x.c

net/dp8393x: do not use memory_region_init_rom_device with NULL

2015-07-28 09:30:10 +01:00

e1000_regs.h

e1000: Trivial implementation of various MAC registers

2015-11-12 15:26:53 +08:00

e1000.c

-----BEGIN PGP SIGNATURE-----

2015-12-07 14:18:31 +00:00

eepro100.c

eepro100: Prevent two endless loops

2015-11-27 10:39:55 +08:00

etraxfs_eth.c

etraxfs_eth: Drop eth_can_receive

2015-07-20 17:47:24 +01:00

imx_fec.c

i.MX: Standardize i.MX FEC debug

2015-10-27 15:59:46 +00:00

lan9118.c

lan9118: log and ignore access to invalid registers, rather than aborting

2015-12-07 21:43:48 +08:00

lance.c

pcnet: Drop pcnet_can_receive

2015-07-27 14:12:18 +01:00

Makefile.objs

i.MX: Add FEC Ethernet Emulator

2015-09-07 10:39:30 +01:00

mcf_fec.c

hw/net: handle flow control in mcf_fec driver receiver

2015-07-28 11:27:53 +01:00

milkymist-minimac2.c

Fix bad error handling after memory_region_init_ram()

2015-09-18 14:39:29 +02:00

mipsnet.c

mipsnet: Flush queued packets when receiving is enabled

2015-07-27 14:12:18 +01:00

ne2000-isa.c

ne2000: Drop ne2000_can_receive

2015-09-02 14:51:07 +01:00

ne2000.c

net: avoid infinite loop when receiving packets(CVE-2015-5278)

2015-09-15 12:51:14 +01:00

ne2000.h

ne2000: Drop ne2000_can_receive

2015-09-02 14:51:07 +01:00

opencores_eth.c

net: remove all cleanup methods from NIC NetClientInfos

2015-01-12 10:16:23 +00:00

pcnet-pci.c

pcnet: Drop pcnet_can_receive

2015-07-27 14:12:18 +01:00

pcnet.c

pcnet: fix rx buffer overflow(CVE-2015-7512)

2015-12-07 21:43:48 +08:00

pcnet.h

pcnet: Drop pcnet_can_receive

2015-07-27 14:12:18 +01:00

rtl8139.c

rtl8139: remove muldiv64()

2015-09-25 14:53:29 +02:00

smc91c111.c

net: smc91c111: flush packets on RCR register changes

2015-09-17 12:36:03 +01:00

spapr_llan.c

spapr: Merge sPAPREnvironment into sPAPRMachineState

2015-07-07 17:44:50 +02:00

stellaris_enet.c

stellaris_enet: Flush queued packets when read done

2015-07-27 14:12:18 +01:00

vhost_net.c

vhost-user: ignore qemu-only features

2015-11-18 18:49:12 +02:00

virtio-net.c

virtio-net: correctly drop truncated packets

2015-10-01 16:16:52 +03:00

vmware_utils.h

net/vmxnet3: remove redundant VMW_SHPRN(...) definition

2016-01-11 11:01:34 +08:00

vmxnet3.c

vmxnet3: Introduce 'x-disable-pcie' back-compat property

2016-01-11 11:01:35 +08:00

vmxnet3.h

vmxnet3: Add support for VMXNET3_CMD_GET_ADAPTIVE_RING_INFO command

2015-10-12 13:19:29 +08:00

vmxnet_debug.h

net/vmxnet3: fix debug macro pattern for vmxnet3

2016-01-11 11:01:34 +08:00

vmxnet_rx_pkt.c

net/vmxnet3: Refactor 'vmxnet_rx_pkt_attach_data'

2015-07-20 17:39:05 +01:00

vmxnet_rx_pkt.h

net/vmxnet3: Refactor 'vmxnet_rx_pkt_attach_data'

2015-07-20 17:39:05 +01:00

vmxnet_tx_pkt.c

net/vmxnet3: Refine l2 header validation

2015-10-12 13:19:29 +08:00

vmxnet_tx_pkt.h

hw: move target-independent files to subdirectories

2013-04-08 18:13:12 +02:00

xen_nic.c

maint: remove unused include for signal.h

2015-09-11 10:21:38 +03:00

xgmac.c

xgmac: Drop packets with eth_can_rx is false.

2015-07-27 14:12:18 +01:00

xilinx_axienet.c

axienet: Flush queued packets when rx is done

2015-07-27 14:12:18 +01:00

xilinx_ethlite.c

xilinx_ethlite: Clean up after commit 2f991ad

2015-03-10 08:15:33 +03:00