net/memif: fix segfault with Tx burst larger than 255

There will be a segfault when tx burst size is larger than 256. This is because eth_memif_tx uses an index i which is uint8_t to count transmitted nb_pkts. Extend i to uint16_t, the same size as nb_pkts. Fixes: b5613c8 ("net/memif: add a Tx fast path") Cc: [email protected] Reported-by: Liangxing Wang <[email protected]> Signed-off-by: Joyce Kong <[email protected]> Reviewed-by: Ruifeng Wang <[email protected]> Reviewed-by: Stephen Hemminger <[email protected]> Acked-by: Ferruh Yigit <[email protected]>
DPDK · Dec 6, 2023 · fefa309 · fefa309
1 parent e92bb0c
commit fefa309
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/.mailmap b/.mailmap
@@ -788,6 +788,7 @@ Lewei Yang <[email protected]>
 Leyi Rong <[email protected]>
 Liang Ma <[email protected]> <[email protected]> <[email protected]>
 Liang-Min Larry Wang <[email protected]>
+Liangxing Wang <[email protected]>
 Liang Xu <[email protected]>
 Liang Zhang <[email protected]>
 Li Feng <[email protected]>

diff --git a/drivers/net/memif/rte_eth_memif.c b/drivers/net/memif/rte_eth_memif.c
@@ -684,7 +684,7 @@ eth_memif_tx(void *queue, struct rte_mbuf **bufs, uint16_t nb_pkts)
 		n_free = __atomic_load_n(&ring->head, __ATOMIC_ACQUIRE) - slot;
 	}
 
-	uint8_t i;
+	uint16_t i;
 	struct rte_mbuf **buf_tmp = bufs;
 	mbuf_head = *buf_tmp++;
 	struct rte_mempool *mp = mbuf_head->pool;