| From foo@baz Fri Nov 7 11:36:50 PST 2014 |
| From: Haiyang Zhang <haiyangz@microsoft.com> |
| Date: Wed, 22 Oct 2014 13:47:18 -0700 |
| Subject: hyperv: Fix the total_data_buflen in send path |
| |
| From: Haiyang Zhang <haiyangz@microsoft.com> |
| |
| [ Upstream commit 942396b01989d54977120f3625e5ba31afe7a75c ] |
| |
| total_data_buflen is used by netvsc_send() to decide if a packet can be put |
| into send buffer. It should also include the size of RNDIS message before the |
| Ethernet frame. Otherwise, a messge with total size bigger than send_section_size |
| may be copied into the send buffer, and cause data corruption. |
| |
| [Request to include this patch to the Stable branches] |
| |
| Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com> |
| Reviewed-by: K. Y. Srinivasan <kys@microsoft.com> |
| Signed-off-by: David S. Miller <davem@davemloft.net> |
| Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
| --- |
| drivers/net/hyperv/netvsc_drv.c | 1 + |
| 1 file changed, 1 insertion(+) |
| |
| --- a/drivers/net/hyperv/netvsc_drv.c |
| +++ b/drivers/net/hyperv/netvsc_drv.c |
| @@ -556,6 +556,7 @@ do_lso: |
| do_send: |
| /* Start filling in the page buffers with the rndis hdr */ |
| rndis_msg->msg_len += rndis_msg_size; |
| + packet->total_data_buflen = rndis_msg->msg_len; |
| packet->page_buf_cnt = init_page_array(rndis_msg, rndis_msg_size, |
| skb, &packet->page_buf[0]); |
| |