diff options
| author | Andriy Voskoboinyk <avos@FreeBSD.org> | 2017-07-04 07:07:08 +0000 |
|---|---|---|
| committer | Andriy Voskoboinyk <avos@FreeBSD.org> | 2017-07-04 07:07:08 +0000 |
| commit | 373769715934eacb7dabc81e876659e2cd64e7ef (patch) | |
| tree | a65d3a73fee25cfc0c9a78fe1aec11f7c91d71dc /sys/dev/rtwn/usb/rtwn_usb_tx.c | |
| parent | 88156ba5816a5bd8afa46da05043fdeb3299ebc5 (diff) | |
| download | src-373769715934eacb7dabc81e876659e2cd64e7ef.tar.gz src-373769715934eacb7dabc81e876659e2cd64e7ef.zip | |
rtwn_usb: reject too long (>16K) mbufs.
While here move RTWN_TXBUFSZ constant from common to USB specific code
(it's not used anywhere else).
Notes
Notes:
svn path=/head/; revision=320640
Diffstat (limited to 'sys/dev/rtwn/usb/rtwn_usb_tx.c')
| -rw-r--r-- | sys/dev/rtwn/usb/rtwn_usb_tx.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sys/dev/rtwn/usb/rtwn_usb_tx.c b/sys/dev/rtwn/usb/rtwn_usb_tx.c index c30e9e746985..2c5d55d3a56b 100644 --- a/sys/dev/rtwn/usb/rtwn_usb_tx.c +++ b/sys/dev/rtwn/usb/rtwn_usb_tx.c @@ -233,6 +233,9 @@ rtwn_usb_tx_start(struct rtwn_softc *sc, struct ieee80211_node *ni, RTWN_ASSERT_LOCKED(sc); + if (m->m_pkthdr.len + sc->txdesc_len > RTWN_USB_TXBUFSZ) + return (EINVAL); + data = rtwn_usb_getbuf(uc); if (data == NULL) return (ENOBUFS); |