linux-kernel - Re: [PATCH] net: mv643xx_eth: fix packet corruption with TSO and tiny unaligned packets.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20160128.160830.991100889530042617.davem@davemloft.net>
Date:	Thu, 28 Jan 2016 16:08:30 -0800 (PST)
From:	David Miller <davem@...emloft.net>
To:	nschichan@...ebox.fr
Cc:	sebastian.hesselbarth@...il.com, netdev@...r.kernel.org,
	linux-kernel@...r.kernel.org, philipp@...ilie-kirchhofer.de
Subject: Re: [PATCH] net: mv643xx_eth: fix packet corruption with TSO and
 tiny unaligned packets.

From: Nicolas Schichan <nschichan@...ebox.fr>
Date: Tue, 26 Jan 2016 16:12:35 +0100

> The code in txq_put_data() would use txq->tx_curr_desc to index the
> tso_hdrs/tso_hdrs_dma buffers, for less than 8 bytes unaligned
> fragments, which is already moved to the next descriptor at the
> beginning of the function.
> 
> If that fragment was the last of the the skb, the next skb would use
> that same space to place the ip headers, overwritting that small
> fragment data.
> 
> Fixes: 91986fd3d335 (net: mv643xx_eth: Ensure proper data alignment in TSO TX path)
> Signed-off-by: Nicolas Schichan <nschichan@...ebox.fr>

Applied.