Boris Pismenny e2ee1a1843 IB/mlx5: Fix integer overflows in mlx5_ib_create_srq ...

commit c2b37f76485f073f020e60b5954b6dc4e55f693c upstream.

This patch validates user provided input to prevent integer overflow due
to integer manipulation in the mlx5_ib_create_srq function.

Cc: syzkaller <syzkaller@googlegroups.com>
Fixes: e126ba97db ("mlx5: Add driver for Mellanox Connect-IB adapters")
Signed-off-by: Boris Pismenny <borisp@mellanox.com>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Signed-off-by: Doug Ledford <dledford@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-03-24 11:00:26 +01:00

..

cmd.h

…

cq.h

{net,IB}/mlx5: CQ commands via mlx5 ifc

2016-08-14 14:39:15 +03:00

device.h

net/mlx5: Add MLX5_ARRAY_SET64 to fix BUILD_BUG_ON

2016-10-13 10:13:24 -04:00

doorbell.h

…

driver.h

IB/mlx5: Fix integer overflows in mlx5_ib_create_srq

2018-03-24 11:00:26 +01:00

fs.h

net/mlx5: Add sniffer namespaces

2016-08-18 18:49:59 +03:00

mlx5_ifc.h

net/mlx5: Define interface bits for fencing UMR wqe

2018-02-03 17:05:33 +01:00

port.h

net/mlx5: Separate query_port_proto_oper for IB and EN

2016-08-18 18:49:52 +03:00

qp.h

{net,IB}/mlx5: Modify QP commands via mlx5 ifc

2016-08-17 17:45:58 +03:00

srq.h

{net, IB}/mlx5: Refactor internal SRQ API

2016-06-23 11:20:07 -04:00

transobj.h

IB/mlx5: Support setting Ethernet priority for Raw Packet QPs

2016-01-21 12:01:09 -05:00

vport.h

net/mlx5: Enable setting minimum inline header mode for VFs

2016-08-17 17:45:59 +03:00