xCAT/xNBA
2
0
Fork 0
mirror of https://github.com/xcat2/xNBA.git synced 2025-03-09 21:56:40 +00:00
Code Issues Projects Releases Wiki Activity

Fix some bad pointer arithmatic in the tg3 driver that was causing the dynamic memory pool to be corrupted (or worse)

Browse Source
This commit is contained in:
James Harper 2007-02-10 00:28:41 +00:00
parent 1c971f1234
commit e1735d5fc2
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/drivers/net/tg3.c
View File

@ -3167,16 +3167,16 @@ static void tg3_transmit(struct nic *nic, const char *dst_addr,
/* Copy the packet to the our local buffer */
frame = &tg3_bss.tx_frame[frame_idx];
memcpy(frame[frame_idx].dst_addr, dst_addr, ETH_ALEN);
memcpy(frame[frame_idx].src_addr, nic->node_addr, ETH_ALEN);
frame[frame_idx].type = htons(type);
memset(frame[frame_idx].data, 0, sizeof(frame[frame_idx].data));
memcpy(frame[frame_idx].data, packet, size);
memcpy(frame->dst_addr, dst_addr, ETH_ALEN);
memcpy(frame->src_addr, nic->node_addr, ETH_ALEN);
frame->type = htons(type);
memset(frame->data, 0, sizeof(frame->data));
memcpy(frame->data, packet, size);
/* Setup the ring buffer entry to transmit */
txd = &tp->tx_ring[entry];
txd->addr_hi = 0; /* Etherboot runs under 4GB */
txd->addr_lo = virt_to_bus(&frame[frame_idx]);
txd->addr_lo = virt_to_bus(frame);
txd->len_flags = ((size + ETH_HLEN) << TXD_LEN_SHIFT) | TXD_FLAG_END;
txd->vlan_tag = 0 << TXD_VLAN_TAG_SHIFT;