diff options
| author | Dana Rubin | 2015-08-18 11:45:55 +0200 |
|---|---|---|
| committer | Jason Wang | 2015-10-12 07:19:29 +0200 |
| commit | a7278b36fcab9af469563bd7b9dadebe2ae25e48 (patch) | |
| tree | 72bd2dc6e6c9218fc4848682adf4bd1dc62b5994 /include | |
| parent | Merge remote-tracking branch 'remotes/ehabkost/tags/x86-pull-request' into st... (diff) | |
| download | qemu-a7278b36fcab9af469563bd7b9dadebe2ae25e48.tar.gz qemu-a7278b36fcab9af469563bd7b9dadebe2ae25e48.tar.xz qemu-a7278b36fcab9af469563bd7b9dadebe2ae25e48.zip | |
net/vmxnet3: Refine l2 header validation
Validation of l2 header length assumed minimal packet size as
eth_header + 2 * vlan_header regardless of the actual protocol.
This caused crash for valid non-IP packets shorter than 22 bytes, as
'tx_pkt->packet_type' hasn't been assigned for such packets, and
'vmxnet3_on_tx_done_update_stats()' expects it to be properly set.
Refine header length validation in 'vmxnet_tx_pkt_parse_headers'.
Check its return value during packet processing flow.
As a side effect, in case IPv4 and IPv6 header validation failure,
corrupt packets will be dropped.
Signed-off-by: Dana Rubin <dana.rubin@ravellosystems.com>
Signed-off-by: Shmulik Ladkani <shmulik.ladkani@ravellosystems.com>
Signed-off-by: Jason Wang <jasowang@redhat.com>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions