Noa Osherovich 498ca3c82a IB/core: Avoid accessing non-allocated memory when inferring port type ... Commit 44c58487d5 ("IB/core: Define 'ib' and 'roce' rdma_ah_attr types") introduced the concept of type in ah_attr: * During ib_register_device, each port is checked for its type which is stored in ib_device's port_immutable array. * During uverbs' modify_qp, the type is inferred using the port number in ib_uverbs_qp_dest struct (address vector) by accessing the relevant port_immutable array and the type is passed on to providers. IB spec (version 1.3) enforces a valid port value only in Reset to Init. During Init to RTR, the address vector must be valid but port number is not mentioned as a field in the address vector, so its value is not validated, which leads to accesses to a non-allocated memory when inferring the port type. Save the real port number in ib_qp during modify to Init (when the comp_mask indicates that the port number is valid) and use this value to infer the port type. Avoid copying the address vector fields if the matching bit is not set in the attr_mask. Address vector can't be modified before the port, so no valid flow is affected. Fixes: 44c58487d5 ('IB/core: Define 'ib' and 'roce' rdma_ah_attr types') Signed-off-by: Noa Osherovich <noaos@mellanox.com> Reviewed-by: Yishai Hadas <yishaih@mellanox.com> Signed-off-by: Leon Romanovsky <leon@kernel.org> Signed-off-by: Doug Ledford <dledford@redhat.com>		2017-08-24 15:33:33 -04:00
..
acpi	More ACPI updates for v4.13-rc1	2017-07-10 15:19:40 -07:00
asm-generic	Merge branch 'work.uaccess-unaligned' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-07-15 11:17:52 -07:00
clocksource	…
crypto	…
drm	i915, amd and some core fixes + mediatek color support	2017-07-13 11:26:18 -07:00
dt-bindings	Merge branch 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus	2017-07-15 10:59:54 -07:00
keys	…
kvm	…
linux	RDMA/mlx5: Fix existence check for extended address vector	2017-08-04 14:24:05 -04:00
math-emu	…
media	main drm pull for v4.13	2017-07-09 18:48:37 -07:00
memory	…
misc	cxl: Export library to support IBM XSL	2017-07-03 23:07:03 +10:00
net	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-07-15 12:00:42 -07:00
pcmcia	…
ras	trace, ras: add ARM processor error trace event	2017-06-22 18:22:05 +01:00
rdma	IB/core: Avoid accessing non-allocated memory when inferring port type	2017-08-24 15:33:33 -04:00
rxrpc	…
scsi	Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending	2017-07-13 14:27:32 -07:00
soc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2017-07-05 12:31:59 -07:00
sound	ASoC: Updates for v4.13	2017-07-03 19:51:42 +02:00
target	iscsi-target: Add login_keys_workaround attribute for non RFC initiators	2017-07-11 10:56:39 -07:00
trace	mm, tree wide: replace __GFP_REPEAT by __GFP_RETRY_MAYFAIL with more useful semantic	2017-07-12 16:26:03 -07:00
uapi	Second batch of KVM updates for v4.13	2017-07-15 10:18:16 -07:00
video	…
xen	This is the first pull request for the new dma-mapping subsystem	2017-07-06 19:20:54 -07:00