Wenpeng Liang 1c0ca9cd17 RDMA/hns: Limit the length of data copied between kernel and userspace ... For ib_copy_from_user(), the length of udata may not be the same as that of cmd. For ib_copy_to_user(), the length of udata may not be the same as that of resp. So limit the length to prevent out-of-bounds read and write operations from ib_copy_from_user() and ib_copy_to_user(). Fixes: de77503a59 ("RDMA/hns: RDMA/hns: Assign rq head pointer when enable rq record db") Fixes: 633fb4d9fd ("RDMA/hns: Use structs to describe the uABI instead of opencoding") Fixes: ae85bf92ef ("RDMA/hns: Optimize qp param setup flow") Fixes: 6fd610c573 ("RDMA/hns: Support 0 hop addressing for SRQ buffer") Fixes: 9d9d4ff788 ("RDMA/hns: Update the kernel header file of hns") Link: https://lore.kernel.org/r/1607650657-35992-2-git-send-email-liweihang@huawei.com Signed-off-by: Wenpeng Liang <liangwenpeng@huawei.com> Signed-off-by: Weihang Li <liweihang@huawei.com> Signed-off-by: Jason Gunthorpe <jgg@nvidia.com>		2020-12-11 15:21:33 -04:00
..
core	RDMA/uverbs: Fix incorrect variable type	2020-12-10 15:05:17 -04:00
hw	RDMA/hns: Limit the length of data copied between kernel and userspace	2020-12-11 15:21:33 -04:00
sw	IB: Fix kernel-doc markups	2020-12-07 15:45:00 -04:00
ulp	RDMA/iser: Remove in_interrupt() usage	2020-12-07 16:05:12 -04:00
Kconfig	RMDA/sw: Don't allow drivers using dma_virt_ops on highmem configs	2020-11-12 13:27:41 -04:00
Makefile	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00