net: ldpaa_eth: Fix buffer overflow in memset

In ldpaa_eth_open a memset is used to initialise a struct to 0 but the
size passed is that of a different struct. Correct to pass the sizeof
the struct that is being initialised.

This issue was found by Smatch.

Signed-off-by: Andrew Goodbody <andrew.goodbody@linaro.org>

diff --git a/drivers/net/ldpaa_eth/ldpaa_eth.c b/drivers/net/ldpaa_eth/ldpaa_eth.c
index b72198c..94e6274 100644 (file)
--- a/drivers/net/ldpaa_eth/ldpaa_eth.c
+++ b/drivers/net/ldpaa_eth/ldpaa_eth.c
@@ -458,7 +458,7 @@ static int ldpaa_eth_open(struct udevice *dev)
        link_state.up == 1 ? printf("up\n") : printf("error state\n");
 #endif
 
-       memset(&d_queue, 0, sizeof(struct dpni_queue));
+       memset(&d_queue, 0, sizeof(struct dpni_queue_id));
        err = dpni_get_queue(dflt_mc_io, MC_CMD_NO_FLAGS,
                             dflt_dpni->dpni_handle, DPNI_QUEUE_RX,
                             0, 0, &d_queue_cfg, &d_queue);