lk/linux-kernel-test
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

staging: hv: fix the page buffer when rndis data go across page boundary

Browse Source 
In rndis_filter_receive_data(), we need to drop the 0th page and move the
rest of pages forward if the rndis data go across page boundary, otherwise
the page offset will overflow.

Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
Signed-off-by: K. Y. Srinivasan <kys@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
This commit is contained in:
Haiyang Zhang
2011-09-01 12:19:47 -07:00
committed by Greg Kroah-Hartman
parent bf769375c9
commit 669c1fc616
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
drivers/staging/hv/rndis_filter.c
View File

@@ -323,6 +323,7 @@ static void rndis_filter_receive_data(struct rndis_device *dev,
{ {
struct rndis_packet *rndis_pkt; struct rndis_packet *rndis_pkt;
u32 data_offset; u32 data_offset;
int i;
rndis_pkt = &msg->msg.pkt; rndis_pkt = &msg->msg.pkt;
@@ -338,6 +339,15 @@ static void rndis_filter_receive_data(struct rndis_device *dev,
pkt->page_buf[0].offset += data_offset; pkt->page_buf[0].offset += data_offset;
pkt->page_buf[0].len -= data_offset; pkt->page_buf[0].len -= data_offset;
/* Drop the 0th page, if rndis data go beyond page boundary */
if (pkt->page_buf[0].offset >= PAGE_SIZE) {
pkt->page_buf[1].offset = pkt->page_buf[0].offset - PAGE_SIZE;
pkt->page_buf[1].len -= pkt->page_buf[1].offset;
pkt->page_buf_cnt--;
for (i = 0; i < pkt->page_buf_cnt; i++)
pkt->page_buf[i] = pkt->page_buf[i+1];
}
pkt->is_data_pkt = true; pkt->is_data_pkt = true;
netvsc_recv_callback(dev->net_dev->dev, pkt); netvsc_recv_callback(dev->net_dev->dev, pkt);