Module Name: src Committed By: jmcneill Date: Fri May 11 10:59:30 UTC 2018
Modified Files: src/sys/dev/usb: if_bwfm_usb.c Log Message: Fix off-by-one in rx packet processing To generate a diff of this commit: cvs rdiff -u -r1.5 -r1.6 src/sys/dev/usb/if_bwfm_usb.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
Modified files: Index: src/sys/dev/usb/if_bwfm_usb.c diff -u src/sys/dev/usb/if_bwfm_usb.c:1.5 src/sys/dev/usb/if_bwfm_usb.c:1.6 --- src/sys/dev/usb/if_bwfm_usb.c:1.5 Fri May 11 07:41:11 2018 +++ src/sys/dev/usb/if_bwfm_usb.c Fri May 11 10:59:30 2018 @@ -1,4 +1,4 @@ -/* $NetBSD: if_bwfm_usb.c,v 1.5 2018/05/11 07:41:11 maya Exp $ */ +/* $NetBSD: if_bwfm_usb.c,v 1.6 2018/05/11 10:59:30 jmcneill Exp $ */ /* $OpenBSD: if_bwfm_usb.c,v 1.2 2017/10/15 14:55:13 patrick Exp $ */ /* * Copyright (c) 2010-2016 Broadcom Corporation @@ -485,7 +485,7 @@ bwfm_usb_rxeof(struct usbd_xfer *xfer, v goto resubmit; len -= sizeof(*hdr); off += sizeof(*hdr); - if (len < hdr->data_offset << 2) + if (len <= hdr->data_offset << 2) goto resubmit; len -= hdr->data_offset << 2; off += hdr->data_offset << 2;