Re: [PATCH 1/2 net] net: mvpp2: prevent buffer overflow in mvpp22_rss_ctx()

2020-05-06 Thread David Miller
From: Dan Carpenter Date: Wed, 6 May 2020 13:16:22 +0300 > The "rss_context" variable comes from the user via ethtool_get_rxfh(). > It can be any u32 value except zero. Eventually it gets passed to > mvpp22_rss_ctx() and if it is over MVPP22_N_RSS_TABLES (8) then it > results in an array overfl

[PATCH 1/2 net] net: mvpp2: prevent buffer overflow in mvpp22_rss_ctx()

2020-05-06 Thread Dan Carpenter
The "rss_context" variable comes from the user via ethtool_get_rxfh(). It can be any u32 value except zero. Eventually it gets passed to mvpp22_rss_ctx() and if it is over MVPP22_N_RSS_TABLES (8) then it results in an array overflow. Fixes: 895586d5dc32 ("net: mvpp2: cls: Use RSS contexts to han