diff options
| author | Russell King (Oracle) <rmk+kernel@armlinux.org.uk> | 2026-01-08 20:36:24 +0300 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-01-13 05:02:11 +0300 |
| commit | ec3fde9eead03bc944ad14d32de11f17c2291306 (patch) | |
| tree | 5d3cc09758c327a5aefc60f5d79ec5a3b99d02e8 /scripts/include | |
| parent | e91a7e45bf0b013dd63bc3311c25e95b498d27f0 (diff) | |
| download | linux-ec3fde9eead03bc944ad14d32de11f17c2291306.tar.xz | |
net: stmmac: descs: fix buffer 1 off-by-one error
norm_set_tx_desc_len_on_ring() incorrectly tests the buffer length,
leading to a length of 2048 being squeezed into a bitfield covering
bits 10:0 - which results in the buffer 1 size being zero.
If this field is zero, buffer 1 is ignored, and thus is equivalent to
transmitting a zero length buffer.
The path to norm_set_tx_desc_len_on_ring() is only possible when the
hardware does not support enhanced descriptors (plat->enh_desc clear)
which is dependent on the hardware.
Reviewed-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
Signed-off-by: Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
Link: https://patch.msgid.link/E1vdtvs-00000002Gtb-2U9G@rmk-PC.armlinux.org.uk
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'scripts/include')
0 files changed, 0 insertions, 0 deletions