On Thu, 2018-03-08 at 15:51 +0200, Leon Romanovsky wrote:
> From: Leon Romanovsky <leonro@xxxxxxxxxxxx>
>
> Hi,
>
> This is another round of overflow patches from Boris.
> Main change is use of size_t variables instead of previously
> used u32.
>
> Thanks
>
> Boris Pismenny (2):
> IB/mlx5: Fix out-of-bounds read in create_raw_packet_qp_rq
> IB/mlx5: Fix integer overflows in mlx5_ib_create_srq
>
> drivers/infiniband/hw/mlx5/qp.c | 23 ++++++++++++++++-------
> drivers/infiniband/hw/mlx5/srq.c | 15 +++++++++------
> include/linux/mlx5/driver.h | 4 ++--
> 3 files changed, 27 insertions(+), 15 deletions(-)
>
> --
> 2.16.2
>
Thanks, series applied to for-rc.
--
Doug Ledford <dledford@xxxxxxxxxx>
GPG KeyID: B826A3330E572FDD
Key fingerprint = AE6B 1BDA 122B 23B4 265B 1274 B826 A333 0E57 2FDDAttachment:
signature.asc
Description: This is a digitally signed message part
