Negative array index write using variable pos as an index to array 
enic->fdir.nodes.
Fixed by add array index check.

Fixes: fefed3d1e62c ("enic: new driver")
Coverity ID 13270

Signed-off-by: Slawomir Mrozowicz <slawomirx.mrozowicz at intel.com>
---
 drivers/net/enic/enic_clsf.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/drivers/net/enic/enic_clsf.c b/drivers/net/enic/enic_clsf.c
index edb56e1..6b1489d 100644
--- a/drivers/net/enic/enic_clsf.c
+++ b/drivers/net/enic/enic_clsf.c
@@ -213,6 +213,12 @@ int enic_fdir_add_fltr(struct enic *enic, struct 
rte_eth_fdir_filter *params)
        }

        pos = rte_hash_add_key(enic->fdir.hash, params);
+       if (pos < 0 || pos >= ENICPMD_FDIR_MAX) {
+               dev_err(enic, "Add hash key failed\n");
+               enic->fdir.stats.f_add++;
+               return -EINVAL;
+       }
+
        enic->fdir.nodes[pos] = key;
        return 0;
 }
-- 
1.9.1

Reply via email to