path: root/drivers/infiniband/sw/rxe/rxe_req.c
diff options
authorParav Pandit <parav@mellanox.com>2017-10-19 08:40:30 +0300
committerDoug Ledford <dledford@redhat.com>2017-10-25 14:37:03 -0400
commit5a3dc32372439eb9a0d6027c54cbfff64803fce5 (patch)
tree2f97ccd988803063be0045490f7e37c04fb158f8 /drivers/infiniband/sw/rxe/rxe_req.c
parentIB/mlx5: Add support for RSS on the inner packet (diff)
IB/cm: Fix memory corruption in handling CM request
In recent code, two path record entries are alwasy cleared while allocated could be either one or two path record entries. This leads to zero out of unallocated memory. This fix initializes alternative path record only when alternative path is set. While we are at it, path record allocation doesn't check for OPA alternative path, but rest of the code checks for OPA alternative path. Path record allocation code doesn't check for OPA alternative LID. This can further lead to memory corruption when only one path record is allocated, but there is actually alternative OPA path record present in CM request. Cc: <stable@vger.kernel.org> # v4.12+ Fixes: 9fdca4da4d8c ("IB/SA: Split struct sa_path_rec based on IB and ROCE specific fields") Signed-off-by: Parav Pandit <parav@mellanox.com> Reviewed-by: Moni Shoua <monis@mellanox.com> Signed-off-by: Leon Romanovsky <leon@kernel.org> Signed-off-by: Doug Ledford <dledford@redhat.com>
Diffstat (limited to 'drivers/infiniband/sw/rxe/rxe_req.c')
0 files changed, 0 insertions, 0 deletions