summaryrefslogtreecommitdiff
path: root/drivers/vme
diff options
context:
space:
mode:
authorGustavo A. R. Silva <gustavo@embeddedor.com>2019-04-15 09:56:46 -0500
committerKalle Valo <kvalo@codeaurora.org>2019-04-29 17:59:40 +0300
commitbfabdd6997323adbedccb13a3fed1967fb8cf8f5 (patch)
tree72ad4e8c87dd288ad35b7d5ea65c0a9455fc9d26 /drivers/vme
parentd8792393a783158cbb2c39939cb897dc5e5299b6 (diff)
wil6210: fix potential out-of-bounds read
Notice that *rc* can evaluate to up to 5, include/linux/netdevice.h: enum gro_result { GRO_MERGED, GRO_MERGED_FREE, GRO_HELD, GRO_NORMAL, GRO_DROP, GRO_CONSUMED, }; typedef enum gro_result gro_result_t; In case *rc* evaluates to 5, we end up having an out-of-bounds read at drivers/net/wireless/ath/wil6210/txrx.c:821: wil_dbg_txrx(wil, "Rx complete %d bytes => %s\n", len, gro_res_str[rc]); Fix this by adding element "GRO_CONSUMED" to array gro_res_str. Addresses-Coverity-ID: 1444666 ("Out-of-bounds read") Fixes: 194b482b5055 ("wil6210: Debug print GRO Rx result") Signed-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com> Reviewed-by: Maya Erez <merez@codeaurora.org> Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Diffstat (limited to 'drivers/vme')
0 files changed, 0 insertions, 0 deletions