Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 29 Aug 2006 12:54:05 GMT
From:      Hans Petter Selasky <hselasky@FreeBSD.org>
To:        Perforce Change Reviews <perforce@FreeBSD.org>
Subject:   PERFORCE change 105258 for review
Message-ID:  <200608291254.k7TCs597095802@repoman.freebsd.org>

next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=105258

Change 105258 by hselasky@hselasky_mini_itx on 2006/08/29 12:53:54

	Extend the length check for incoming frames.

Affected files ...

.. //depot/projects/usb/src/sys/dev/usb/if_cue.c#5 edit

Differences ...

==== //depot/projects/usb/src/sys/dev/usb/if_cue.c#5 (text+ko) ====

@@ -687,7 +687,7 @@
 
  tr_transferred:
 
-	if (xfer->actlen <= 2) {
+	if (xfer->actlen <= (2 + sizeof(struct ether_header))) {
 	    ifp->if_ierrors++;
 	    goto tr_setup;
 	}
@@ -1018,10 +1018,6 @@
 	return;
 }
 
-/*
- * Stop the adapter and free any mbufs allocated to the
- * RX and TX lists.
- */
 static void
 cue_cfg_stop(struct cue_softc *sc,
 	     struct cue_config_copy *cc, u_int16_t refcount)



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200608291254.k7TCs597095802>