Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 4fa0d22c authored by Dean Luick's avatar Dean Luick Committed by Doug Ledford
Browse files

IB/hfi1: Validate SDMA user request index 



Reviewed-by: default avatarIra Weiny <ira.weiny@intel.com>
Signed-off-by: default avatarDean Luick <dean.luick@intel.com>
Signed-off-by: default avatarDoug Ledford <dledford@redhat.com>
parent bdf7752e

drivers/infiniband/hw/hfi1/user_sdma.c

+8 −0
Original line number Diff line number Diff line
@@ -552,6 +552,14 @@ int hfi1_user_sdma_process_request(struct file *fp, struct iovec *iovec, 


	trace_hfi1_sdma_user_reqinfo(dd, uctxt->ctxt, fd->subctxt,

				     (u16 *)&info);



	if (info.comp_idx >= hfi1_sdma_comp_ring_size) {

		hfi1_cdbg(SDMA,

			  "[%u:%u:%u:%u] Invalid comp index",

			  dd->unit, uctxt->ctxt, fd->subctxt, info.comp_idx);

		return -EINVAL;

	}



	if (cq->comps[info.comp_idx].status == QUEUED ||

	    test_bit(SDMA_REQ_IN_USE, &pq->reqs[info.comp_idx].flags)) {

		hfi1_cdbg(SDMA, "[%u:%u:%u] Entry %u is in QUEUED state",