qemu-patch-raspberry4/hw/net/rocker
Prasad J Pandit 007cd223de net: rocker: fix an incorrect array bounds check
While processing transmit(tx) descriptors in 'tx_consume' routine
the switch emulator suffers from an off-by-one error, if a
descriptor was to have more than allowed(ROCKER_TX_FRAGS_MAX=16)
fragments. Fix an incorrect bounds check to avoid it.

Reported-by: Qinghao Tang <luodalongde@gmail.com>
Cc: qemu-stable@nongnu.org
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>
2016-01-11 11:01:35 +08:00
..
qmp-norocker.c qerror: Clean up QERR_ macros to expand into a single string 2015-06-22 18:20:40 +02:00
rocker.c net: rocker: fix an incorrect array bounds check 2016-01-11 11:01:35 +08:00
rocker.h rocker: mark copy-to-cpu pkts as forwarding offloaded 2015-07-07 13:13:22 +01:00
rocker_desc.c rocker: Use g_new() & friends where that makes obvious sense 2015-10-08 19:46:47 +03:00
rocker_desc.h rocker: add new rocker switch device 2015-05-11 14:49:04 +01:00
rocker_fp.c rocker: Use g_new() & friends where that makes obvious sense 2015-10-08 19:46:47 +03:00
rocker_fp.h qmp/hmp: add rocker device support 2015-06-12 13:42:17 +01:00
rocker_hw.h rocker: mark copy-to-cpu pkts as forwarding offloaded 2015-07-07 13:13:22 +01:00
rocker_of_dpa.c error: More error_setg() usage 2015-11-11 18:56:26 +01:00
rocker_of_dpa.h rocker: add new rocker switch device 2015-05-11 14:49:04 +01:00
rocker_tlv.h rocker: add new rocker switch device 2015-05-11 14:49:04 +01:00
rocker_world.c rocker: return -1 when dropping packet on ingress 2015-07-07 13:13:22 +01:00
rocker_world.h rocker: add new rocker switch device 2015-05-11 14:49:04 +01:00