Re: [PATCH net] cxgb3: fix out of bounds read

2016-05-02 Thread Jan Stancek
- Original Message - > From: "David Miller" <da...@davemloft.net> > To: mschm...@redhat.com > Cc: netdev@vger.kernel.org, sant...@chelsio.com, jstan...@redhat.com > Sent: Monday, 2 May, 2016 3:00:00 AM > Subject: Re: [PATCH net] cxgb3: fix out of bounds

Re: [PATCH net] cxgb3: fix out of bounds read

2016-05-01 Thread David Miller
From: Michal Schmidt Date: Fri, 29 Apr 2016 11:06:50 +0200 > An out of bounds read of 2 bytes was discovered in cxgb3 with KASAN. > > t3_config_rss() expects both arrays it gets as parameters to have > terminators. setup_rss(), the caller, forgets to add a terminator to >

[PATCH net] cxgb3: fix out of bounds read

2016-04-29 Thread Michal Schmidt
An out of bounds read of 2 bytes was discovered in cxgb3 with KASAN. t3_config_rss() expects both arrays it gets as parameters to have terminators. setup_rss(), the caller, forgets to add a terminator to one of the arrays. Thankfully the iteration in t3_config_rss() stops anyway, but in the last