While processing transmit(tx) descriptors in 'tx_consume' routine
the switch emulator suffers from an off-by-one error, if a
descriptor was to have more than allowed(ROCKER_TX_FRAGS_MAX=16)
fragments. Fix an incorrect bounds check to avoid it.
Reported-by: Qinghao Tang <luodalongde@gmail.com>
Cc: qemu-stable@nongnu.org
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| qmp-norocker.c | ||
| rocker.c | ||
| rocker.h | ||
| rocker_desc.c | ||
| rocker_desc.h | ||
| rocker_fp.c | ||
| rocker_fp.h | ||
| rocker_hw.h | ||
| rocker_of_dpa.c | ||
| rocker_of_dpa.h | ||
| rocker_tlv.h | ||
| rocker_world.c | ||
| rocker_world.h | ||