Prasad J Pandit d88d3a0938 net: mipsnet: check transmit buffer size before sending
When processing MIPSnet I/O port write operation, it uses a
transmit buffer tx_buffer[MAX_ETH_FRAME_SIZE=1514]. Two indices
's->tx_written' and 's->tx_count' are used to control data written
to this buffer. If the two were to be equal before writing, it'd
lead to an OOB write access beyond tx_buffer. Add check to avoid it.

Reported-by: Li Qiang <qiang6-s@360.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>
2016-06-28 10:13:57 +08:00
..
2016-06-20 22:30:34 +01:00
2016-06-17 16:33:48 +10:00
2016-05-29 09:11:10 +02:00
2016-06-14 15:59:13 +01:00
2016-06-14 15:59:15 +01:00
2016-06-27 15:37:32 +01:00
2016-05-18 15:04:27 +03:00
2016-06-07 18:02:48 +03:00
2016-05-29 09:11:10 +02:00
2016-06-24 05:13:57 +03:00
2016-06-17 03:28:03 +03:00
2016-01-29 15:07:25 +00:00
2016-06-20 22:30:34 +01:00
2016-06-24 05:13:57 +03:00
2016-05-19 16:42:29 +02:00
2016-06-20 22:30:34 +01:00
2016-06-22 12:53:26 +02:00
2016-06-22 11:28:42 +01:00
2015-12-22 18:39:19 +02:00