drivers/net/r8169.c | 11 +++++------ 1 files changed, 5 insertions(+), 6 deletions(-)
New commits: commit bb6ccc8f6d39333565108f383a07e65198863a21 Author: Eric Dumazet <[email protected]> Date: Tue Jun 9 04:01:02 2009 -0700 r8169: fix crash when large packets are received commit fdd7b4c3302c93f6833e338903ea77245eb510b4 upstream. Michael Tokarev reported receiving a large packet could crash a machine with RTL8169 NIC. ( original thread at http://lkml.org/lkml/2009/6/8/192 ) Problem is this driver tells that NIC frames up to 16383 bytes can be received but provides skb to rx ring allocated with smaller sizes (1536 bytes in case standard 1500 bytes MTU is used) When a frame larger than what was allocated by driver is received, dma transfert can occurs past the end of buffer and corrupt kernel memory. Fix is to tell to NIC what is the maximum size a frame can be. This bug is very old, (before git introduction, linux-2.6.10), and should be backported to stable versions. Reported-by: Michael Tokarev <[email protected]> Signed-off-by: Eric Dumazet <[email protected]> Tested-by: Michael Tokarev <[email protected]> Signed-off-by: David S. Miller <[email protected]> Signed-off-by: Greg Kroah-Hartman <[email protected]> http://suva.vyatta.com/git/?p=linux-vyatta.git;a=commitdiff;h=bb6ccc8f6d39333565108f383a07e65198863a21 _______________________________________________ svn mailing list [email protected] http://mailman.vyatta.com/mailman/listinfo/svn
