diff options
| author | Vasundhara Volam <vasundhara-v.volam@broadcom.com> | 2018-04-19 03:16:16 -0400 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2018-04-19 16:35:09 -0400 |
| commit | a60faa60da891e311e19fd3e88d611863f431130 (patch) | |
| tree | 2c5c1171a5ef972cb5668b38bbafe038d06a3df6 /net/smc/af_smc.c | |
| parent | 0df8bb01cb38f5b835e2739a7f5ca0e954d79c90 (diff) | |
| download | linux-stable-a60faa60da891e311e19fd3e88d611863f431130.tar.gz linux-stable-a60faa60da891e311e19fd3e88d611863f431130.tar.bz2 linux-stable-a60faa60da891e311e19fd3e88d611863f431130.zip | |
bnxt_en: Fix memory fault in bnxt_ethtool_init()
In some firmware images, the length of BNX_DIR_TYPE_PKG_LOG nvram type
could be greater than the fixed buffer length of 4096 bytes allocated by
the driver. This was causing HWRM_NVM_READ to copy more data to the buffer
than the allocated size, causing general protection fault.
Fix the issue by allocating the exact buffer length returned by
HWRM_NVM_FIND_DIR_ENTRY, instead of 4096. Move the kzalloc() call
into the bnxt_get_pkgver() function.
Fixes: 3ebf6f0a09a2 ("bnxt_en: Add installed-package firmware version reporting via Ethtool GDRVINFO")
Signed-off-by: Vasundhara Volam <vasundhara-v.volam@broadcom.com>
Signed-off-by: Michael Chan <michael.chan@broadcom.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/smc/af_smc.c')
0 files changed, 0 insertions, 0 deletions