diff options
| author | Bryan Cantrill <bryan@joyent.com> | 2018-03-24 04:13:43 +0000 |
|---|---|---|
| committer | Bryan Cantrill <bryan@joyent.com> | 2018-03-24 04:22:41 +0000 |
| commit | da60bfe8804af4d2d9578dd4479fd9e844956012 (patch) | |
| tree | 756a2bd2eb5faf86b8348f5e786d2b1897fdabab | |
| parent | d5eb108ff4a94b03a014e90e6213bf7bf4faa374 (diff) | |
| download | illumos-joyent-da60bfe8804af4d2d9578dd4479fd9e844956012.tar.gz | |
OS-6798 viona_recv_merged() can corrupt used ring
Reviewed by: Patrick Mooney <patrick.mooney@joyent.com>
Approved by: Patrick Mooney <patrick.mooney@joyent.com>
| -rw-r--r-- | usr/src/uts/i86pc/io/viona/viona.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/usr/src/uts/i86pc/io/viona/viona.c b/usr/src/uts/i86pc/io/viona/viona.c index 359f814265..db5f46ae75 100644 --- a/usr/src/uts/i86pc/io/viona/viona.c +++ b/usr/src/uts/i86pc/io/viona/viona.c @@ -1670,6 +1670,7 @@ viona_recv_merged(viona_vring_t *ring, const mblk_t *mp, size_t msz) * drop the packet. */ err = EMSGSIZE; + break; } chunk = 0; i = 0; |