Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1488554

Re: [PATCH] cxgb4: fix signed wrap around when decrementing index idx

From David Miller <davem@davemloft.net>
Newsgroups linux.kernel
Subject Re: [PATCH] cxgb4: fix signed wrap around when decrementing index idx
Date 2016-09-22 07:50 +0200
Message-ID <sk53s-2k2-3@gated-at.bofh.it> (permalink)
References <sjuwV-4dq-7@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


From: Colin King <colin.king@canonical.com>
Date: Tue, 20 Sep 2016 15:48:45 +0100

> From: Colin Ian King <colin.king@canonical.com>
> 
> Change predecrement compare to post decrement compare to avoid an
> unsigned integer wrap-around comparison when decrementing idx in
> the while loop.
> 
> For example, when idx is zero, the current situation will
> predecrement idx in the while loop, wrapping idx to the maximum
> signed integer and cause out of bounds reads on rxq_info->msix_tbl[idx].
> 
> Signed-off-by: Colin Ian King <colin.king@canonical.com>

This doesn't apply cleanly to the 'net' tree, please respin.

Back to linux.kernel | Previous | NextPrevious in thread | Find similar | Unroll thread


Thread

[PATCH] cxgb4: fix signed wrap around when decrementing index idx Colin King <colin.king@canonical.com> - 2016-09-20 16:50 +0200
  [PATCH] cxgb4: fix signed wrap around when decrementing index idx Colin King <colin.king@canonical.com> - 2016-09-20 16:50 +0200
  Re: [PATCH] cxgb4: fix signed wrap around when decrementing index  idx David Miller <davem@davemloft.net> - 2016-09-22 07:50 +0200

csiph-web