From: Yuval Mintz <[email protected]>
Date: Sat, 29 Oct 2016 17:04:35 +0300
> Driver allocates a shadow array for transmitted SKBs with X entries;
> That means valid indices are {0,...,X - 1}. [X == 8191]
> Problem is the driver also uses X as a mask for a
> producer/consumer in order to choose the right entry in the
> array which allows access to entry X which is out of bounds.
>
> To fix this, simply allocate X + 1 entries in the shadow array.
>
> Signed-off-by: Yuval Mintz <[email protected]>
Applied.
