tree dec1c5f564261a5ebec0ba12d7b28af9c4858178
parent 944fdc5e27a5b5adbb765891e8e70e88ba9a00ec
author Mauro Matteo Cascella <mcascell@redhat.com> 1606209885 +0100
committer Peter Maydell <peter.maydell@linaro.org> 1606818848 +0000

hw/net/dp8393x: fix integer underflow in dp8393x_do_transmit_packets()

An integer underflow could occur during packet transmission due to 'tx_len' not
being updated if SONIC_TFC register is set to zero. Check for negative 'tx_len'
when removing existing FCS.

RHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=1899722
Signed-off-by: Mauro Matteo Cascella <mcascell@redhat.com>
Reported-by: Gaoning Pan <pgn@zju.edu.cn>
Acked-by: Jason Wang <jasowang@redhat.com>
Message-id: 20201124092445.658647-1-mcascell@redhat.com
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>