hw/net/dp8393x: fix integer underflow in dp8393x_do_transmit_packets()
authorMauro Matteo Cascella <mcascell@redhat.com>
Tue, 24 Nov 2020 09:24:45 +0000 (10:24 +0100)
committerPeter Maydell <peter.maydell@linaro.org>
Tue, 1 Dec 2020 10:34:08 +0000 (10:34 +0000)
commit915976bd98a9286efe6f2e573cb4f1360603adf9
treedec1c5f564261a5ebec0ba12d7b28af9c4858178
parent944fdc5e27a5b5adbb765891e8e70e88ba9a00ec
hw/net/dp8393x: fix integer underflow in dp8393x_do_transmit_packets()

An integer underflow could occur during packet transmission due to 'tx_len' not
being updated if SONIC_TFC register is set to zero. Check for negative 'tx_len'
when removing existing FCS.

RHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=1899722
Signed-off-by: Mauro Matteo Cascella <mcascell@redhat.com>
Reported-by: Gaoning Pan <pgn@zju.edu.cn>
Acked-by: Jason Wang <jasowang@redhat.com>
Message-id: 20201124092445.658647-1-mcascell@redhat.com
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
hw/net/dp8393x.c