On Mon, Feb 04, 2019 at 07:36:42AM -0800, Mike Marciniszyn wrote:
> Upstream commit 09ce351dff8e7636af0beb72cd4a86c3904a0500.
>
> Fix potential memory corruption and panic in loopback for
> IB_WR_SEND varaiants.
>
> The code blindly assumes the posted length will fit in the
> fetched rwqe, which is not a valid assumption.
>
> Fix by adding a limit test, and triggering the appropriate
> send completion and putting the QP in an error state. This
> mimics the handling for non-loopback QPs.
>
> [ported to older kernels where the loopback was in each driver]
>
> Cc: <stable@xxxxxxxxxxxxxxx> #v4.9+
> Fixes: 7724105686e7 ("IB/hfi1: add driver files")
> Reviewed-by: Michael J. Ruhl <michael.j.ruhl@xxxxxxxxx>
> Signed-off-by: Mike Marciniszyn <mike.marciniszyn@xxxxxxxxx>
> ---
> drivers/infiniband/hw/hfi1/ruc.c | 7 ++++++-
> drivers/infiniband/hw/qib/qib_ruc.c | 7 ++++++-
> 2 files changed, 12 insertions(+), 2 deletions(-)
Now queued up, thanks.
greg k-h
