From patchwork Fri Feb 8 10:09:07 2013 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Luis Henriques X-Patchwork-Id: 219090 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from chlorine.canonical.com (chlorine.canonical.com [91.189.94.204]) by ozlabs.org (Postfix) with ESMTP id 57AD62C00DC for ; Fri, 8 Feb 2013 21:09:29 +1100 (EST) Received: from localhost ([127.0.0.1] helo=chlorine.canonical.com) by chlorine.canonical.com with esmtp (Exim 4.71) (envelope-from ) id 1U3ktU-0003oi-WE; Fri, 08 Feb 2013 10:09:21 +0000 Received: from youngberry.canonical.com ([91.189.89.112]) by chlorine.canonical.com with esmtp (Exim 4.71) (envelope-from ) id 1U3ktS-0003nV-77 for kernel-team@lists.ubuntu.com; Fri, 08 Feb 2013 10:09:18 +0000 Received: from bl22-241-30.dsl.telepac.pt ([2.83.241.30] helo=localhost) by youngberry.canonical.com with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1U3ktS-0002vg-1Y for kernel-team@lists.ubuntu.com; Fri, 08 Feb 2013 10:09:18 +0000 From: Luis Henriques To: kernel-team@lists.ubuntu.com Subject: [Quantal CVE 2/2] UBUNTU: SAUCE: netback: correct netbk_tx_err to handle wrap around. Date: Fri, 8 Feb 2013 10:09:07 +0000 Message-Id: <1360318149-9448-7-git-send-email-luis.henriques@canonical.com> X-Mailer: git-send-email 1.8.1.2 In-Reply-To: <1360318149-9448-1-git-send-email-luis.henriques@canonical.com> References: <1360318149-9448-1-git-send-email-luis.henriques@canonical.com> X-BeenThere: kernel-team@lists.ubuntu.com X-Mailman-Version: 2.1.13 Precedence: list List-Id: Kernel team discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: kernel-team-bounces@lists.ubuntu.com Errors-To: kernel-team-bounces@lists.ubuntu.com From: Ian Campbell BugLink: http://bugs.launchpad.net/bugs/1117325 Signed-off-by: Ian Campbell Acked-by: Jan Beulich CVE-2013-0216 Signed-off-by: Stefan Bader Acked-by: Luis Henriques --- drivers/net/xen-netback/netback.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/net/xen-netback/netback.c b/drivers/net/xen-netback/netback.c index 9a5189e..e4e5724 100644 --- a/drivers/net/xen-netback/netback.c +++ b/drivers/net/xen-netback/netback.c @@ -851,7 +851,7 @@ static void netbk_tx_err(struct xenvif *vif, do { make_tx_response(vif, txp, XEN_NETIF_RSP_ERROR); - if (cons >= end) + if (cons == end) break; txp = RING_GET_REQUEST(&vif->tx, cons++); } while (1);