Commit 78f857f2 authored Mar 25, 2009 by Nathan Williams Committed by David Woodhouse Mar 25, 2009

solos: Check for rogue received packets



Sometimes there can be received packets with the size field set to 0xFFFF.
This seems to only occur after an FPGA or firmware upgrade.
This patch discards packets with an invalid size.

Signed-off-by: Nathan Williams <nathan@traverse.com.au>
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>

parent 4dbedf43

drivers/atm/solos-pci.c

+4 −0

Original line number	Diff line number	Diff line
		@@ -671,6 +671,10 @@ void solos_bh(unsigned long card_arg)
		memcpy_fromio(header, RX_BUF(card, port), sizeof(*header));

		size = le16_to_cpu(header->size);
		if (size > (card->buffer_size - sizeof(*header))){
		dev_warn(&card->dev->dev, "Invalid buffer size\n");
		continue;
		}

		skb = alloc_skb(size + 1, GFP_ATOMIC);
		if (!skb) {