Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit 0b9278cf authored by Sean Tranchetti's avatar Sean Tranchetti Committed by Gerrit - the friendly Code Review server
Browse files

drivers: rmnet_perf: Flush on IP and QMAP length mismatch



Commit e4d2a0199758 ("drivers: rmnet: perf: Determine lengths based on
IP") gave preference to the lengths set in the IP headers over the QMAP
packet length in order to avoid absorbing any padding after the IP packet
into the final coalesced packet.

Unfortunately, this did not account for the case when the IP length was
LARGER than the QMAP length, which can cause out of bounds access when
making the new packet. This patch handles both cases by checking both
the QMAP and the IP header lengths, and flushing the packet to the stack
if they disagree.

Change-Id: Iaa2c179aac3514914d48580dbbf54e9cba792278
Signed-off-by: default avatarSean Tranchetti <stranche@codeaurora.org>
parent c7cd0928
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment