On Thu, Mar 15, 2018 at 03:33:02PM +0200, Leon Romanovsky wrote:
> From: Leon Romanovsky <leonro@xxxxxxxxxxxx>
>
> Garbage supplied by user will cause to UCMA module provide zero
> memory size for memcpy(), because it wasn't checked, it will
> produce unpredictable results in rdma_resolve_addr().
[..]
> Reported-by: <syzbot+1d8c43206853b369d00c@xxxxxxxxxxxxxxxxxxxxxxxxx>
> Fixes: 75216638572f ("RDMA/cma: Export rdma cm interface to userspace")
> Signed-off-by: Leon Romanovsky <leonro@xxxxxxxxxxxx>
> Reviewed-by: Sean Hefty <sean.hefty@xxxxxxxxx>
> drivers/infiniband/core/ucma.c | 10 +++++++---
> 1 file changed, 7 insertions(+), 3 deletions(-)
Applied to for-rc, thanks
Jason
--
To unsubscribe from this list: send the line "unsubscribe linux-rdma" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
