Re: [PATCH] 3c515: Write outside array bounds
From: David Miller <davem@davemloft.net>
Date: 2009-07-30 20:28:28
From: David Miller <davem@davemloft.net>
Date: 2009-07-30 20:28:28
From: Roel Kluin <redacted> Date: Thu, 30 Jul 2009 12:26:32 +0200
if dev_alloc_skb() fails on the first iteration, a write to cp->rx_ring[-1] occurs. Signed-off-by: Roel Kluin <redacted>
Applied.