diff options
| author |   Mike Marciniszyn <mike.marciniszyn@cornelisnetworks.com> | 2021-10-12 13:55:19 -0400 |
|---|---|---|
| committer |   Jason Gunthorpe <jgg@nvidia.com> | 2021-10-13 13:26:04 -0300 |
| commit | d39bf40e55e666b5905fdbd46a0dced030ce87be (patch) | |
| tree | 5d74bc4459cfbf5e0bda3ce9173be3ef0318c528 /drivers/infiniband/hw/hfi1/pio.c | |
| parent | RDMA/mlx5: Set user priority for DCT (diff) | |
| download | linux-dev-d39bf40e55e666b5905fdbd46a0dced030ce87be.tar.xz linux-dev-d39bf40e55e666b5905fdbd46a0dced030ce87be.zip | |
IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
Overflowing either addrlimit or bytes_togo can allow userspace to trigger
a buffer overflow of kernel memory. Check for overflows in all the places
doing math on user controlled buffers.
Fixes: f931551bafe1 ("IB/qib: Add new qib driver for QLogic PCIe InfiniBand adapters")
Link: https://lore.kernel.org/r/20211012175519.7298.77738.stgit@awfm-01.cornelisnetworks.com
Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com>
Reviewed-by: Dennis Dalessandro <dennis.dalessandro@cornelisnetworks.com>
Signed-off-by: Mike Marciniszyn <mike.marciniszyn@cornelisnetworks.com>
Signed-off-by: Dennis Dalessandro <dennis.dalessandro@cornelisnetworks.com>
Signed-off-by: Jason Gunthorpe <jgg@nvidia.com>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions