Commit ead315e4 authored by Prasad J Pandit's avatar Prasad J Pandit Committed by Jason Wang
Browse files

net: check fragment length during fragmentation 



Network transport abstraction layer supports packet fragmentation.
While fragmenting a packet, it checks for more fragments from
packet length and current fragment length. It is susceptible
to an infinite loop, if the current fragment length is zero.
Add check to avoid it.

Reported-by: default avatarLi Qiang <liqiang6-s@360.cn>
Signed-off-by: default avatarPrasad J Pandit <pjp@fedoraproject.org>
Reviewed-by: default avatarDmitry Fleytman <dmitry@daynix.com>
CC: qemu-stable@nongnu.org
Signed-off-by: default avatarJason Wang <jasowang@redhat.com>
parent 53279c76

hw/net/net_tx_pkt.c

+1 −1
Original line number Diff line number Diff line
@@ -590,7 +590,7 @@ static bool net_tx_pkt_do_sw_fragmentation(struct NetTxPkt *pkt, 


        fragment_offset += fragment_len;



    } while (more_frags);

    } while (fragment_len && more_frags);



    return true;

}