KekenoBSD/src
3
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

bhyve: validate e82545 checksum offset field

Browse Source 
Reported by:	Mehdi Talbi, Synacktiv
This commit is contained in:
Mark Johnston
2022-04-05 22:58:28 +00:00
committed by Ed Maste
parent e8e691983b
commit b0aa20bec5
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
usr.sbin/bhyve/pci_e82545.c
+6 -3
View File
@@ -1276,9 +1276,7 @@ e82545_transmit(struct e82545_softc *sc, uint16_t head, uint16_t tail,
goto done;
}
if (sc->esc_txctx.cmd_and_length & E1000_TXD_CMD_TCP) {
if (hdrlen < ckinfo[1].ck_start + 14 ||
(ckinfo[1].ck_valid &&
hdrlen < ckinfo[1].ck_off + 2)) {
if (hdrlen < ckinfo[1].ck_start + 14) {
WPRINTF("TSO hdrlen too small for TCP fields "
"(%d) -- dropped", hdrlen);
goto done;
@@ -1290,6 +1288,11 @@ e82545_transmit(struct e82545_softc *sc, uint16_t head, uint16_t tail,
goto done;
}
}
if (ckinfo[1].ck_valid && hdrlen < ckinfo[1].ck_off + 2) {
WPRINTF("TSO hdrlen too small for TCP/UDP fields "
"(%d) -- dropped", hdrlen);
goto done;
}
}
/* Allocate, fill and prepend writable header vector. */