aboutsummaryrefslogtreecommitdiff
path: root/tools/perf/scripts/python
diff options
context:
space:
mode:
authorBernard Metzler <[email protected]>2022-11-15 18:07:47 +0100
committerJason Gunthorpe <[email protected]>2022-11-15 16:47:00 -0400
commit60da2d11fcbc043304910e4d2ca82f9bab953e63 (patch)
tree56ea0855c71121b1ca97f6e96716de2223642691 /tools/perf/scripts/python
parentecacb3751f254572af0009b9501e2cdc83a30b6a (diff)
RDMA/siw: Set defined status for work completion with undefined status
A malicious user may write undefined values into memory mapped completion queue elements status or opcode. Undefined status or opcode values will result in out-of-bounds access to an array mapping siw internal representation of opcode and status to RDMA core representation when reaping CQ elements. While siw detects those undefined values, it did not correctly set completion status to a defined value, thus defeating the whole purpose of the check. This bug leads to the following Smatch static checker warning: drivers/infiniband/sw/siw/siw_cq.c:96 siw_reap_cqe() error: buffer overflow 'map_cqe_status' 10 <= 21 Fixes: bdf1da5df9da ("RDMA/siw: Fix immediate work request flush to completion queue") Link: https://lore.kernel.org/r/[email protected] Reported-by: Dan Carpenter <[email protected]> Signed-off-by: Bernard Metzler <[email protected]> Signed-off-by: Jason Gunthorpe <[email protected]>
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions