Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 57761d8d authored by Eli Cohen's avatar Eli Cohen Committed by Roland Dreier
Browse files

IB/mlx5: Verify reserved fields are cleared 



Verify that reserved fields in struct mlx5_ib_resize_cq are cleared
before continuing execution of the verb. This is required to allow
making use of this area in future revisions.

Signed-off-by: default avatarYann Droneaud <ydroneaud@opteya.com>
Signed-off-by: default avatarEli Cohen <eli@mellanox.com>
Signed-off-by: default avatarRoland Dreier <roland@purestorage.com>
parent 8c8a4914

drivers/infiniband/hw/mlx5/cq.c

+6 −2
Original line number Diff line number Diff line
@@ -877,8 +877,12 @@ static int resize_user(struct mlx5_ib_dev *dev, struct mlx5_ib_cq *cq, 
	int npages;

	struct ib_ucontext *context = cq->buf.umem->context;



	if (ib_copy_from_udata(&ucmd, udata, sizeof(ucmd)))

		return -EFAULT;

	err = ib_copy_from_udata(&ucmd, udata, sizeof(ucmd));

	if (err)

		return err;



	if (ucmd.reserved0 || ucmd.reserved1)

		return -EINVAL;



	umem = ib_umem_get(context, ucmd.buf_addr, entries * ucmd.cqe_size,

			   IB_ACCESS_LOCAL_WRITE, 1);