Commit 89295152 authored Jul 04, 2019 by Peng Li Committed by David S. Miller Jul 05, 2019

net: hns3: set maximum length to resp_data_len for exceptional case



If HCLGE_MBX_MAX_RESP_DATA_SIZE > HCLGE_MBX_MAX_RESP_DATA_SIZE,
the memcpy will cause out of memory. So this patch just set
resp_data_len to the maximum length for this case.

Signed-off-by: Peng Li <lipeng321@huawei.com>
Signed-off-by: Huazhong Tan <tanhuazhong@huawei.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent b9a8f883

drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c

+4 −0

Original line number	Diff line number	Diff line
		@@ -29,6 +29,10 @@ static int hclge_gen_resp_to_vf(struct hclge_vport *vport,
		"PF fail to gen resp to VF len %d exceeds max len %d\n",
		resp_data_len,
		HCLGE_MBX_MAX_RESP_DATA_SIZE);
		/* If resp_data_len is too long, set the value to max length
		* and return the msg to VF
		*/
		resp_data_len = HCLGE_MBX_MAX_RESP_DATA_SIZE;
		}

		hclge_cmd_setup_basic_desc(&desc, HCLGEVF_OPC_MBX_PF_TO_VF, false);