kernel/drivers/net/usb/smsc95xx.c
.. .. @@ -1824,6 +1824,12 @@ 1824 1824 size = (u16)((header & RX_STS_FL_) >> 16); 1825 1825 align_count = (4 - ((size + NET_IP_ALIGN) % 4)) % 4; 1826 1826 1827 + if (unlikely(size > skb->len)) {1828 + netif_dbg(dev, rx_err, dev->net,1829 + "size err header=0x%08x\n", header);1830 + return 0;1831 + }1832 +1827 1833 if (unlikely(header & RX_STS_ES_)) { 1828 1834 netif_dbg(dev, rx_err, dev->net, 1829 1835 "Error header=0x%08x\n", header);