diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2021-05-08 16:30:35 +0300 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2021-05-10 14:31:27 -0700 |
| commit | a269333fa5c0c8e53c92b5a28a6076a28cde3e83 (patch) | |
| tree | df38f4b1df1fadbf42b81a615c1f9d4e08a55406 /net/tipc | |
| parent | ddb6e00f8413e885ff826e32521cff7924661de0 (diff) | |
| download | linux-a269333fa5c0c8e53c92b5a28a6076a28cde3e83.tar.gz linux-a269333fa5c0c8e53c92b5a28a6076a28cde3e83.tar.bz2 linux-a269333fa5c0c8e53c92b5a28a6076a28cde3e83.zip | |
net: dsa: fix a crash if ->get_sset_count() fails
If ds->ops->get_sset_count() fails then it "count" is a negative error
code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative
error code is type promoted to a very high value and the loop will
corrupt memory until the system crashes.
Fix this by checking for error codes and changing the type of "i" to
just int.
Fixes: badf3ada60ab ("net: dsa: Provide CPU port statistics to master netdev")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Andrew Lunn <andrew@lunn.ch>
Reviewed-by: Florian Fainelli <f.fainelli@gmail.com>
Reviewed-by: Vladimir Oltean <olteanv@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/tipc')
0 files changed, 0 insertions, 0 deletions