linux-stable/drivers/infiniband/hw/mlx4
Dan Carpenter d50b3c73f1 RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
The ucmd->log_sq_bb_count variable is controlled by the user so this
shift can wrap.  Fix it by using check_shl_overflow() in the same way
that it was done in commit 515f60004e ("RDMA/hns: Prevent undefined
behavior in hns_roce_set_user_sq_size()").

Fixes: 839041329f ("IB/mlx4: Sanity check userspace send queue sizes")
Signed-off-by: Dan Carpenter <error27@gmail.com>
Link: https://lore.kernel.org/r/a8dfbd1d-c019-4556-930b-bab1ded73b10@kili.mountain
Signed-off-by: Leon Romanovsky <leon@kernel.org>
2023-03-19 11:35:46 +02:00
..
ah.c RDMA: Restore ability to fail on AH destroy 2020-09-09 13:57:22 -03:00
alias_GUID.c RDMA/mlx4: Delete useless module.h include 2022-01-28 13:03:12 -04:00
cm.c RDMA/mlx4: Avoid flush_scheduled_work() usage 2022-05-20 11:21:00 -03:00
cq.c RDMA/mlx4: Remove unused parameter udata 2021-05-20 11:52:17 -03:00
doorbell.c RDMA: Use the sg_table directly and remove the opencoded version from umem 2021-08-24 19:52:40 -03:00
Kconfig treewide: replace '---help---' in Kconfig files with 'help' 2020-06-14 01:57:21 +09:00
mad.c treewide: use get_random_u32() when possible 2022-10-11 17:42:58 -06:00
main.c RDMA/mlx: Calling qp event handler in workqueue context 2023-01-15 12:23:10 +02:00
Makefile
mcg.c RDMA: Manual changes for sysfs_emit and neatening 2020-10-30 21:03:52 -03:00
mlx4_ib.h RDMA/mlx: Calling qp event handler in workqueue context 2023-01-15 12:23:10 +02:00
mr.c IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers 2022-09-22 12:46:39 +03:00
qp.c RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() 2023-03-19 11:35:46 +02:00
srq.c RDMA/mlx4: remove redundant assignment to variable nreq 2022-02-01 10:55:43 -04:00
sysfs.c IB/mlx4: Use port iterator and validation APIs 2021-02-02 19:25:40 -04:00