android_kernel_motorola_sm6375/drivers/net
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Manish Chopra 639e979a7d qed: fix LL2 RX buffer allocation
commit 2f3389c73832ad90b63208c0fc281ad080114c7a upstream.

Driver allocates the LL2 rx buffers from kmalloc()
area to construct the skb using slab_build_skb()

The required size allocation seems to have overlooked
for accounting both skb_shared_info size and device
placement padding bytes which results into the below
panic when doing skb_put() for a standard MTU sized frame.

skbuff: skb_over_panic: text:ffffffffc0b0225f len:1514 put:1514
head:ff3dabceaf39c000 data:ff3dabceaf39c042 tail:0x62c end:0x566
dev:<NULL>
…
skb_panic+0x48/0x4a
skb_put.cold+0x10/0x10
qed_ll2b_complete_rx_packet+0x14f/0x260 [qed]
qed_ll2_rxq_handle_completion.constprop.0+0x169/0x200 [qed]
qed_ll2_rxq_completion+0xba/0x320 [qed]
qed_int_sp_dpc+0x1a7/0x1e0 [qed]

This patch fixes this by accouting skb_shared_info and device
placement padding size bytes when allocating the buffers.

Cc: David S. Miller <davem@davemloft.net>
Fixes: 0a7fb11c23 ("qed: Add Light L2 support")
Signed-off-by: Manish Chopra <manishc@marvell.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-10-25 11:53:21 +02:00
..
appletalk
arcnet net: arcnet: Do not call kfree_skb() under local_irq_disable() 2023-09-23 10:59:43 +02:00
bonding bonding: fix macvlan over alb bond support 2023-08-30 16:27:24 +02:00
caif
can can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM 2023-09-23 10:59:41 +02:00
dsa net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent 2023-10-10 21:46:44 +02:00
ethernet qed: fix LL2 RX buffer allocation 2023-10-25 11:53:21 +02:00
fddi
fjes
hamradio
hippi
hyperv
ieee802154 ieee802154: ca8210: Fix a potential UAF in ca8210_probe 2023-10-25 11:53:18 +02:00
ipvlan ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() 2023-08-30 16:27:23 +02:00
netdevsim
phy net: phy: broadcom: stub c45 read/write for 54810 2023-08-30 16:27:20 +02:00
plip
ppp
slip
team team: fix null-ptr-deref when team device type is changed 2023-10-10 21:46:37 +02:00
usb net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read 2023-10-25 11:53:18 +02:00
vmxnet3
wan drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() 2023-10-10 21:46:43 +02:00
wimax
wireless wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling 2023-10-10 21:46:43 +02:00
xen-netback xen-netback: use default TX queue size for vifs 2023-10-25 11:53:18 +02:00
dummy.c
eql.c
geneve.c
gtp.c gtp: Fix use-after-free in __gtp_encap_destroy(). 2023-07-27 08:37:11 +02:00
ifb.c
Kconfig
LICENSE.SRC
loopback.c
macsec.c Revert "net: macsec: preserve ingress frame ordering" 2023-09-23 10:59:40 +02:00
macvlan.c
macvtap.c
Makefile
mdio.c
mii.c
net_failover.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
Space.c
sungem_phy.c
tap.c net: tap_open(): set sk_uid from current_fsuid() 2023-08-11 11:53:59 +02:00
thunderbolt.c net: thunderbolt: Fix TCPv6 GSO checksum calculation 2023-10-10 21:46:41 +02:00
tun.c drivers: net: prevent tun_build_skb() to exceed the packet size limit 2023-08-16 18:19:24 +02:00
veth.c veth: Fixing transmit return status for dropped packets 2023-09-23 10:59:58 +02:00
virtio_net.c virtio-net: set queues after driver_ok 2023-08-30 16:27:19 +02:00
vrf.c
vsockmon.c
vxlan.c vxlan: generalize vxlan_parse_gpe_hdr and remove unused args 2023-09-23 10:59:38 +02:00
xen-netfront.c