* [PATCH] net/iavf: fix potential out of bounds access
@ 2022-03-08 5:56 Leyi Rong
2022-03-08 15:12 ` Ferruh Yigit
0 siblings, 1 reply; 2+ messages in thread
From: Leyi Rong @ 2022-03-08 5:56 UTC (permalink / raw)
To: stevex.yang, qi.z.zhang; +Cc: dev, Leyi Rong, stable
Fix potential out-out-bounds access as overrunning callee's array of
size 26 by passing argument rxq->rxdid(which evaluates to 63) in call
to iavf_rx_scan_hw_ring_flex_rxd.
Coverity issue: 376616
Fixes: 7b1ba38904a0 ("net/iavf: fix function pointer in multi-process")
Cc: stable@dpdk.org
Signed-off-by: Leyi Rong <leyi.rong@intel.com>
---
drivers/net/iavf/iavf_rxtx.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/drivers/net/iavf/iavf_rxtx.c b/drivers/net/iavf/iavf_rxtx.c
index cb779879cb..16e8d021f9 100644
--- a/drivers/net/iavf/iavf_rxtx.c
+++ b/drivers/net/iavf/iavf_rxtx.c
@@ -476,7 +476,7 @@ iavf_rxd_to_pkt_fields_by_comms_aux_v2(struct iavf_rx_queue *rxq,
}
static const
-iavf_rxd_to_pkt_fields_t rxd_to_pkt_fields_ops[] = {
+iavf_rxd_to_pkt_fields_t rxd_to_pkt_fields_ops[IAVF_RXDID_LAST + 1] = {
[IAVF_RXDID_COMMS_AUX_VLAN] = iavf_rxd_to_pkt_fields_by_comms_aux_v1,
[IAVF_RXDID_COMMS_AUX_IPV4] = iavf_rxd_to_pkt_fields_by_comms_aux_v1,
[IAVF_RXDID_COMMS_AUX_IPV6] = iavf_rxd_to_pkt_fields_by_comms_aux_v1,
--
2.25.1
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [PATCH] net/iavf: fix potential out of bounds access
2022-03-08 5:56 [PATCH] net/iavf: fix potential out of bounds access Leyi Rong
@ 2022-03-08 15:12 ` Ferruh Yigit
0 siblings, 0 replies; 2+ messages in thread
From: Ferruh Yigit @ 2022-03-08 15:12 UTC (permalink / raw)
To: Leyi Rong, stevex.yang, qi.z.zhang; +Cc: dev, stable
On 3/8/2022 5:56 AM, Leyi Rong wrote:
> Fix potential out-out-bounds access as overrunning callee's array of
> size 26 by passing argument rxq->rxdid(which evaluates to 63) in call
> to iavf_rx_scan_hw_ring_flex_rxd.
>
> Coverity issue: 376616
> Fixes: 7b1ba38904a0 ("net/iavf: fix function pointer in multi-process")
> Cc: stable@dpdk.org
>
> Signed-off-by: Leyi Rong <leyi.rong@intel.com>
Reviewed-by: Ferruh Yigit <ferruh.yigit@intel.com>
Applied to dpdk-next-net/main, thanks.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2022-03-08 15:12 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-03-08 5:56 [PATCH] net/iavf: fix potential out of bounds access Leyi Rong
2022-03-08 15:12 ` Ferruh Yigit
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).