From: Peter Maydell <[email protected]> In rtl8139_transfer_frame(), if we are transmitting a frame over loopback then we do this by calling qemu_receive_packet(). If we have an iovec rather than a simple buffer (which happens only when we're sending a packet where we are inserting a vlan tag), we have to convert this into a simple buffer first using iov_to_buf(). However, when we do this we forget to also update the 'size' local variable to the size of the new simple buffer, so we will truncate the packet by 4 bytes (the size of the vlan tag).
Correct the logic so we don't truncate vlan-tagged packets when sending them over loopback. Cc: [email protected] Reported-by: Bin Meng <[email protected]> Signed-off-by: Peter Maydell <[email protected]> Reviewed-by: Bin Meng <[email protected]> Message-ID: <[email protected]> Signed-off-by: Philippe Mathieu-Daudé <[email protected]> (cherry picked from commit f3a10c1c454789ad6bb0633118019f4c6544b4b3) Signed-off-by: Michael Tokarev <[email protected]> diff --git a/hw/net/rtl8139.c b/hw/net/rtl8139.c index 2b61c171f2a..16479284eea 100644 --- a/hw/net/rtl8139.c +++ b/hw/net/rtl8139.c @@ -1765,6 +1765,7 @@ static void rtl8139_transfer_frame(RTL8139State *s, uint8_t *buf, int size, buf2 = g_malloc(buf2_size); iov_to_buf(iov, 3, 0, buf2, buf2_size); buf = buf2; + size = buf2_size; } DPRINTF("+++ transmit loopback mode\n"); -- 2.47.3
