From mboxrd@z Thu Jan 1 00:00:00 1970 From: David Miller Subject: Re: [Xen-devel] [PATCH] drivers: net: xen-netfront: fix array initialization bug Date: Mon, 14 Apr 2014 12:51:31 -0400 (EDT) Message-ID: <20140414.125131.1934050779129550948.davem@davemloft.net> References: <1397296540-3007-1-git-send-email-v.maffione@gmail.com> <20140412.165152.1877473530496221304.davem@davemloft.net> <534BAD7C.6090107@citrix.com> Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: v.maffione@gmail.com, netdev@vger.kernel.org, linux-kernel@vger.kernel.org, xen-devel@lists.xenproject.org, boris.ostrovsky@oracle.com To: david.vrabel@citrix.com Return-path: In-Reply-To: <534BAD7C.6090107@citrix.com> Sender: linux-kernel-owner@vger.kernel.org List-Id: netdev.vger.kernel.org From: David Vrabel Date: Mon, 14 Apr 2014 10:42:20 +0100 > On 12/04/14 21:51, David Miller wrote: >> From: Vincenzo Maffione >> Date: Sat, 12 Apr 2014 11:55:40 +0200 >> >>> This patch fixes the initialization of an array used in the TX >>> datapath that was mistakenly initialized together with the >>> RX datapath arrays. An out of range array access could happen >>> when RX and TX rings had different sizes. >>> >>> Signed-off-by: Vincenzo Maffione >> >> Good catch, applied, thanks. > > Thanks. You can queue this for net-next since the Tx and Rx rings are > the same constant size. I was able to determine when I reviewed this patch that the size in bytes of the rings are the same (PAGE_SIZE), but I couldn't ascertain whether the individual ring entries in the TX ring and RX ring are the same size. Are they?