RE: [PATCH net 3/7 v2] bnx2x: fix possible overrun of VFPF multicast addresses array

2017-03-07 Thread Mintz, Yuval
> It is too late to check for the limit of the number of VF multicast addresses > after they have already been copied to the req->multicast[] array, possibly > overflowing it. > > Do the check before copying. > > Checking early also avoids having to (and forgetting to) unlock vf2pf_mutex. > > Wh

[PATCH net 3/7 v2] bnx2x: fix possible overrun of VFPF multicast addresses array

2017-03-06 Thread Michal Schmidt
It is too late to check for the limit of the number of VF multicast addresses after they have already been copied to the req->multicast[] array, possibly overflowing it. Do the check before copying. Checking early also avoids having to (and forgetting to) unlock vf2pf_mutex. While we're looking