Revision f949a12fd697479f68d99dc65e9bbab68ee49043 authored by Dan Carpenter on 30 April 2019, 10:44:19 UTC, committed by David S. Miller on 30 April 2019, 15:02:37 UTC
The "fs->location" is a u32 that comes from the user in ethtool_set_rxnfc().
We can't pass unclamped values to test_bit() or it results in an out of
bounds access beyond the end of the bitmap.
Fixes: 7318166cacad ("net: dsa: bcm_sf2: Add support for ethtool::rxnfc")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent b130234
| File | Mode | Size |
|---|---|---|
| Makefile | -rw-r--r-- | 361 bytes |
| compat.c | -rw-r--r-- | 2.2 KB |
| ipc_sysctl.c | -rw-r--r-- | 5.9 KB |
| mq_sysctl.c | -rw-r--r-- | 2.9 KB |
| mqueue.c | -rw-r--r-- | 40.1 KB |
| msg.c | -rw-r--r-- | 30.5 KB |
| msgutil.c | -rw-r--r-- | 3.6 KB |
| namespace.c | -rw-r--r-- | 4.6 KB |
| sem.c | -rw-r--r-- | 62.1 KB |
| shm.c | -rw-r--r-- | 43.0 KB |
| syscall.c | -rw-r--r-- | 5.1 KB |
| util.c | -rw-r--r-- | 22.1 KB |
| util.h | -rw-r--r-- | 8.9 KB |
Computing file changes ...
