the hardware may report a packet longer than our receive buffer. Instead
of reading past the read buffer, discard too long packets.

Signed-off-by: Sascha Hauer <s.ha...@pengutronix.de>
---
 drivers/net/cs8900.c | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/drivers/net/cs8900.c b/drivers/net/cs8900.c
index afb0f3e26e..bce26d4def 100644
--- a/drivers/net/cs8900.c
+++ b/drivers/net/cs8900.c
@@ -295,10 +295,14 @@ static int cs8900_recv(struct eth_device *dev)
        status = readw(priv->regs + CS8900_RTDATA0);
        len = readw(priv->regs + CS8900_RTDATA0);
 
-       for (addr = (u16 *)priv->rx_buf, i = (len + 1) >> 1; i > 0; i--)
-               *addr++ = readw(priv->regs + CS8900_RTDATA0);
-
-       net_receive(dev, priv->rx_buf, len);
+       if (len <= PKTSIZE) {
+               for (addr = (u16 *)priv->rx_buf, i = (len + 1) >> 1; i > 0; i--)
+                       *addr++ = readw(priv->regs + CS8900_RTDATA0);
+               net_receive(dev, priv->rx_buf, len);
+       } else {
+               for (addr = (u16 *)priv->rx_buf, i = (len + 1) >> 1; i > 0; i--)
+                       (void)readw(priv->regs + CS8900_RTDATA0);
+       }
 
        return len;
 }
-- 
2.39.2


Reply via email to