]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
RDMA/bnxt_re: Fix a bunch of off by one bugs in qplib_fp.c
authorDan Carpenter <dan.carpenter@oracle.com>
Wed, 4 Jul 2018 09:58:02 +0000 (12:58 +0300)
committerJuerg Haefliger <juergh@canonical.com>
Wed, 24 Jul 2019 01:51:39 +0000 (19:51 -0600)
commitd13bf72291521b08cb82f3c04b32a8788e4337d5
tree2637680bdf24e64eb9b7b2b49cb309c3118849b8
parentf156dc37c84f3fe46bc64754cec0b17719f0d42a
RDMA/bnxt_re: Fix a bunch of off by one bugs in qplib_fp.c

BugLink: https://bugs.launchpad.net/bugs/1836287
[ Upstream commit c1dfc0114c901b4f46c85ceff0491debf2b2a2ec ]

The srq->swq[] is allocated in bnxt_qplib_create_srq().  It has
srq->hwq.max_elements elements so these tests should be > instead of >=
or we might go beyond the end of the array.

Fixes: 1ac5a4047975 ("RDMA/bnxt_re: Add bnxt_re RoCE driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Selvin Xavier <selvin.xavier@broadcom.com>
Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Khalid Elmously <khalid.elmously@canonical.com>
drivers/infiniband/hw/bnxt_re/qplib_fp.c