diff options
author | David S. Miller <davem@davemloft.net> | 2015-10-05 16:58:51 +0300 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2015-10-05 16:58:51 +0300 |
commit | df7b6015421babdf0fe7c0061dcc0bddf8ebab09 (patch) | |
tree | 42370c6d0d40944bbe9244f8f866a86f2b769ea4 /arch/arm/net/bpf_jit_32.h | |
parent | bab18991871545dfbd10c931eb0fe8f7637156a9 (diff) | |
parent | 6a570814cd430fa5ef4f278e8046dcf12ee63f13 (diff) | |
download | linux-df7b6015421babdf0fe7c0061dcc0bddf8ebab09.tar.xz |
Merge branch 'asix-rx-mem-handling'
Mark Craske says:
====================
Improve ASIX RX memory allocation error handling
The ASIX RX handler algorithm is weak on error handling.
There is a design flaw in the ASIX RX handler algorithm because the
implementation for handling RX Ethernet frames for the DUB-E100 C1 can
have Ethernet frames spanning multiple URBs. This means that payload data
from more than 1 URB is sometimes needed to fill the socket buffer with a
complete Ethernet frame. When the URB with the start of an Ethernet frame
is received then an attempt is made to allocate a socket buffer. If the
memory allocation fails then the algorithm sets the buffer pointer member
to NULL and the function exits (no crash yet). Subsequently, the RX hander
is called again to process the next URB which assumes there is a socket
buffer available and the kernel crashes when there is no buffer.
This patchset implements an improvement to the RX handling algorithm to
avoid a crash when no memory is available for the socket buffer.
The patchset will apply cleanly to the net-next master branch but the
created kernel has not been tested. The driver was tested on ARM kernels
v3.8 and v3.14 for a commercial product.
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'arch/arm/net/bpf_jit_32.h')
0 files changed, 0 insertions, 0 deletions