From: roel kluin Date: Sat, 8 Aug 2009 23:54:21 +0000 (+0000) Subject: mlx4_en: Fix read buffer overflow in mlx4_en_complete_rx_desc() X-Git-Tag: v2.6.31-rc7~27^2~24 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=973507cb8610d4c84f090d5f1f0ca54fa0559d27;p=pandora-kernel.git mlx4_en: Fix read buffer overflow in mlx4_en_complete_rx_desc() If the length is less or equal to frag_prefix_size in the first iteration we write skb_frags_rx[-1] and read from priv->frag_info[-1] Signed-off-by: Roel Kluin Signed-off-by: David S. Miller --- Reading git-diff-tree failed