From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1756447AbcKKMNX (ORCPT ); Fri, 11 Nov 2016 07:13:23 -0500 Received: from violet.fr.zoreil.com ([92.243.8.30]:35298 "EHLO violet.fr.zoreil.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1756320AbcKKMNV (ORCPT ); Fri, 11 Nov 2016 07:13:21 -0500 Date: Fri, 11 Nov 2016 13:13:11 +0100 From: Francois Romieu To: Hayes Wang Cc: netdev@vger.kernel.org, nic_swsd@realtek.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, mlord@pobox.com Subject: Re: [PATCH net 2/2] r8152: rx descriptor check Message-ID: <20161111121311.GA19673@electric-eye.fr.zoreil.com> References: <1394712342-15778-226-Taiwan-albertk@realtek.com> <1394712342-15778-228-Taiwan-albertk@realtek.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1394712342-15778-228-Taiwan-albertk@realtek.com> X-Organisation: Land of Sunshine Inc. User-Agent: Mutt/1.5.23 (2014-03-12) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hayes Wang : > For some platforms, the data in memory is not the same with the one > from the device. That is, the data of memory is unbelievable. The > check is used to find out this situation. Invalid packet size corrupted receive descriptors in Realtek's device reminds of CVE-2009-4537. Is the silicium of both devices different enough to prevent the same exploit to happen ? -- Ueimor