Sowmini Varadhan 79a5b9727a rds: rds_msg_zcopy should return error of null rm->data.op_mmp_znotifier ...

if either or both of MSG_ZEROCOPY and SOCK_ZEROCOPY have not been
specified, the rm->data.op_mmp_znotifier allocation will be skipped.
In this case, it is invalid ot pass down a cmsghdr with
RDS_CMSG_ZCOPY_COOKIE, so return EINVAL from rds_msg_zcopy for this
case.

Reported-by: syzbot+f893ae7bb2f6456dfbc3@syzkaller.appspotmail.com
Fixes: 0cebaccef3ac ("rds: zerocopy Tx support.")
Signed-off-by: Sowmini Varadhan <sowmini.varadhan@oracle.com>
Acked-by: Willem de Bruijn <willemb@google.com>
Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2018-02-23 12:30:52 -05:00

..

af_rds.c

rds: support for zcopy completion notification

2018-02-16 16:04:17 -05:00

bind.c

rds; Reset rs->rs_bound_addr in rds_add_bound() failure path

2017-12-27 13:37:27 -05:00

cong.c

rds: tcp: use rds_destroy_pending() to synchronize netns/module teardown and rds connection/workq management

2018-02-08 15:23:52 -05:00

connection.c

rds: do not call ->conn_alloc with GFP_KERNEL

2018-02-13 13:52:02 -05:00

ib_cm.c

rds: tcp: use rds_destroy_pending() to synchronize netns/module teardown and rds connection/workq management

2018-02-08 15:23:52 -05:00

ib_fmr.c

net/rds/ib_fmr.c: use kmalloc_array_node()

2017-11-15 18:21:02 -08:00

ib_frmr.c

RDS: IB: split the mr registration and invalidation path

2017-01-02 14:02:47 -08:00

ib_mr.h

rds: ib: add the static type to the function

2017-03-13 23:20:05 -07:00

ib_rdma.c

RDS: IB: Initialize max_items based on underlying device attributes

2017-10-05 21:16:33 -07:00

ib_recv.c

rds: ib: Fix NULL pointer dereference in debug code

2017-11-10 14:54:47 +09:00

ib_ring.c

RDS/IW+IB: Set recv ring low water mark to 1/2 full.

2009-04-09 17:21:14 -07:00

ib_send.c

rds: Fix inaccurate accounting of unsignaled wrs

2017-10-26 17:35:57 +09:00

ib_stats.c

RDS: IB: add few useful cache stasts

2017-01-02 14:02:51 -08:00

ib_sysctl.c

net: Convert uses of typedef ctl_table to struct ctl_table

2013-06-13 02:36:09 -07:00

ib.c

rds: tcp: use rds_destroy_pending() to synchronize netns/module teardown and rds connection/workq management

2018-02-08 15:23:52 -05:00

ib.h

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-11-04 09:26:51 +09:00

info.c

rds: fix an integer overflow test in rds_info_getsockopt()

2015-08-03 15:20:16 -07:00

info.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

Kconfig

RDS: Drop stale iWARP RDMA transport

2016-03-02 14:13:17 -05:00

loop.c

RDS: TCP: Hooks to set up a single connection path

2016-07-01 16:45:17 -04:00

loop.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

message.c

rds: zerocopy Tx support.

2018-02-16 16:04:17 -05:00

page.c

rds: remove dead code

2016-12-26 21:35:39 -05:00

rdma_transport.c

RDS: RDMA: start rdma listening after init

2017-01-02 14:02:45 -08:00

rdma_transport.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

rdma.c

RDS: null pointer dereference in rds_atomic_free_op

2018-01-04 14:19:26 -05:00

rds_single_path.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

rds.h

rds: zerocopy Tx support.

2018-02-16 16:04:17 -05:00

recv.c

rds: support for zcopy completion notification

2018-02-16 16:04:17 -05:00

send.c

rds: rds_msg_zcopy should return error of null rm->data.op_mmp_znotifier

2018-02-23 12:30:52 -05:00

stats.c

net/rds: zero last byte for strncpy

2013-03-08 00:35:44 -05:00

sysctl.c

net: rds: fix coding style issues

2016-06-18 21:34:09 -07:00

tcp_connect.c

rds: tcp: use rds_destroy_pending() to synchronize netns/module teardown and rds connection/workq management

2018-02-08 15:23:52 -05:00

tcp_listen.c

rds: tcp: use sock_create_lite() to create the accept socket

2017-07-08 11:16:16 +01:00

tcp_recv.c

rds: tcp: use rds_destroy_pending() to synchronize netns/module teardown and rds connection/workq management

2018-02-08 15:23:52 -05:00

tcp_send.c

rds: tcp: use rds_destroy_pending() to synchronize netns/module teardown and rds connection/workq management

2018-02-08 15:23:52 -05:00

tcp_stats.c

net: rds: fix const array syntax

2011-07-01 16:16:19 -07:00

tcp.c

net: make getname() functions return length rather than use int* parameter

2018-02-12 14:15:04 -05:00

tcp.h

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2018-01-23 13:51:56 -05:00

threads.c

rds: tcp: use rds_destroy_pending() to synchronize netns/module teardown and rds connection/workq management

2018-02-08 15:23:52 -05:00

transport.c

rds: remove unnecessary returned value check

2017-03-03 09:51:22 -08:00