PERFORCE change 105258 for review

[Hans Petter Selasky]

http://perforce.freebsd.org/chv.cgi?CH=105258

Change 105258 by hselasky at hselasky_mini_itx on 2006/08/29 12:53:54

	Extend the length check for incoming frames.

Affected files ...

.. //depot/projects/usb/src/sys/dev/usb/if_cue.c#5 edit

Differences ...

==== //depot/projects/usb/src/sys/dev/usb/if_cue.c#5 (text+ko) ====

@@ -687,7 +687,7 @@
 
  tr_transferred:
 
-	if (xfer->actlen <= 2) {
+	if (xfer->actlen <= (2 + sizeof(struct ether_header))) {
 	    ifp->if_ierrors++;
 	    goto tr_setup;
 	}
@@ -1018,10 +1018,6 @@
 	return;
 }
 
-/*
- * Stop the adapter and free any mbufs allocated to the
- * RX and TX lists.
- */
 static void
 cue_cfg_stop(struct cue_softc *sc,
 	     struct cue_config_copy *cc, u_int16_t refcount)