On 2020/3/26 下午7:11, Li Qiang wrote:
P J P mailto:ppan...@redhat.com>> 于2020年3月25日周三
上午1:31写道：
From: Prasad J Pandit mailto:p...@fedoraproject.org>>
Tulip network driver while copying tx/rx buffers does not check
frame size against r/w data length. This may lead to OOB buffer
P J P 于2020年3月25日周三 上午1:31写道：
> From: Prasad J Pandit
>
> Tulip network driver while copying tx/rx buffers does not check
> frame size against r/w data length. This may lead to OOB buffer
> access. Add check to avoid it.
>
> Limit iterations over descriptors to avoid potential infinite
> loop is
From: Prasad J Pandit
Tulip network driver while copying tx/rx buffers does not check
frame size against r/w data length. This may lead to OOB buffer
access. Add check to avoid it.
Limit iterations over descriptors to avoid potential infinite
loop issue in tulip_xmit_list_update.
Reported-by: L
