diff options
| author | Sudheer Mogilappagari | 2017-06-07 11:43:05 +0200 |
|---|---|---|
| committer | Jeff Kirsher | 2017-06-21 03:17:10 +0200 |
| commit | 1e99854715c79b3e2ebe09d80006aaff0f5c2335 (patch) | |
| tree | b13bdf997f13df0f0f0722d8e55166652bab3740 /drivers/net/ethernet/intel | |
| parent | i40e: comment that udp_port must be in host byte order (diff) | |
| download | kernel-qcow2-linux-1e99854715c79b3e2ebe09d80006aaff0f5c2335.tar.gz kernel-qcow2-linux-1e99854715c79b3e2ebe09d80006aaff0f5c2335.tar.xz kernel-qcow2-linux-1e99854715c79b3e2ebe09d80006aaff0f5c2335.zip | |
i40e: Fix potential out of bound array access
This is a fix for the static code analysis issue where dcbcfg->numapps
could be greater than size of array (i.e dcbcfg->app[I40E_DCBX_MAX_APPS]).
The fix makes sure that the array is not accessed past the size of
of the array (i.e. I40E_DCBX_MAX_APPS).
Copyright updated to 2017.
Signed-off-by: Sudheer Mogilappagari <sudheer.mogilappagari@intel.com>
Tested-by: Andrew Bowers <andrewx.bowers@intel.com>
Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>
Diffstat (limited to 'drivers/net/ethernet/intel')
| -rw-r--r-- | drivers/net/ethernet/intel/i40e/i40e_dcb.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/drivers/net/ethernet/intel/i40e/i40e_dcb.c b/drivers/net/ethernet/intel/i40e/i40e_dcb.c index 0fab3a9b51d9..bf1d67e184f7 100644 --- a/drivers/net/ethernet/intel/i40e/i40e_dcb.c +++ b/drivers/net/ethernet/intel/i40e/i40e_dcb.c @@ -1,7 +1,7 @@ /******************************************************************************* * * Intel Ethernet Controller XL710 Family Linux Driver - * Copyright(c) 2013 - 2014 Intel Corporation. + * Copyright(c) 2013 - 2017 Intel Corporation. * * This program is free software; you can redistribute it and/or modify it * under the terms and conditions of the GNU General Public License, @@ -390,6 +390,8 @@ static void i40e_parse_cee_app_tlv(struct i40e_cee_feat_tlv *tlv, if (!dcbcfg->numapps) return; + if (dcbcfg->numapps > I40E_DCBX_MAX_APPS) + dcbcfg->numapps = I40E_DCBX_MAX_APPS; for (i = 0; i < dcbcfg->numapps; i++) { u8 up, selector; |