drivers: rmnet_perf: Flush on IP and QMAP length mismatch
Commit e4d2a0199758 ("drivers: rmnet: perf: Determine lengths based on
IP") gave preference to the lengths set in the IP headers over the QMAP
packet length in order to avoid absorbing any padding after the IP packet
into the final coalesced packet.
Unfortunately, this did not account for the case when the IP length was
LARGER than the QMAP length, which can cause out of bounds access when
making the new packet. This patch handles both cases by checking both
the QMAP and the IP header lengths, and flushing the packet to the stack
if they disagree.
Change-Id: Iaa2c179aac3514914d48580dbbf54e9cba792278
Signed-off-by:
Sean Tranchetti <stranche@codeaurora.org>
Loading
Please register or sign in to comment