summary refs log tree commit diff
path: root/net/rxrpc
diff options
context:
space:
mode:
authorColin Ian King <colin.king@canonical.com>2016-09-22 18:48:58 +0100
committerDavid S. Miller <davem@davemloft.net>2016-09-23 07:25:16 -0400
commite12934d9806e61d2727069cd56757987f3da76aa (patch)
tree5deca3943fa0b2d4c99a43c7381a12f352dfe2ae /net/rxrpc
parentc7b9e63341db3ab2160194ebbf0d3d6041419cee (diff)
downloadlinux-e12934d9806e61d2727069cd56757987f3da76aa.tar.gz
cxgb4: fix signed wrap around when decrementing index idx
Change predecrement compare to post decrement compare to avoid an
unsigned integer wrap-around comparison when decrementing idx in
the while loop.

For example, when idx is zero, the current situation will
predecrement idx in the while loop, wrapping idx to the maximum
signed integer and cause out of bounds reads on rxq_info->msix_tbl[idx].

Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/rxrpc')
0 files changed, 0 insertions, 0 deletions