]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commitdiff
i40iw: Validate correct IRD/ORD connection parameters
authorTatyana Nikolova <tatyana.e.nikolova@intel.com>
Fri, 22 Dec 2017 15:47:01 +0000 (09:47 -0600)
committerThadeu Lima de Souza Cascardo <cascardo@canonical.com>
Thu, 12 Apr 2018 13:03:07 +0000 (10:03 -0300)
BugLink: http://bugs.launchpad.net/bugs/1763366
[ Upstream commit ce9ce74145aa6814a370a9ff4f5a1d719baaced1 ]

Casting to u16 before validating IRD/ORD connection
parameters could cause recording wrong IRD/ORD values
in the cm_node. Validate the IRD/ORD parameters as
they are passed by the application before recording
them.

Fixes: f27b4746f378 ("i40iw: add connection management code")
Signed-off-by: Tatyana Nikolova <tatyana.e.nikolova@intel.com>
Signed-off-by: Shiraz Saleem <shiraz.saleem@intel.com>
Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
drivers/infiniband/hw/i40iw/i40iw_cm.c

index 77870f9e173684d91f99a5a0627d0490b14342e9..726d7143475f2cd29bf59b41dacce5f3a9765670 100644 (file)
@@ -125,7 +125,8 @@ static u8 i40iw_derive_hw_ird_setting(u16 cm_ird)
  * @conn_ird: connection IRD
  * @conn_ord: connection ORD
  */
-static void i40iw_record_ird_ord(struct i40iw_cm_node *cm_node, u16 conn_ird, u16 conn_ord)
+static void i40iw_record_ird_ord(struct i40iw_cm_node *cm_node, u32 conn_ird,
+                                u32 conn_ord)
 {
        if (conn_ird > I40IW_MAX_IRD_SIZE)
                conn_ird = I40IW_MAX_IRD_SIZE;
@@ -3849,7 +3850,7 @@ int i40iw_connect(struct iw_cm_id *cm_id, struct iw_cm_conn_param *conn_param)
        }
 
        cm_node->apbvt_set = true;
-       i40iw_record_ird_ord(cm_node, (u16)conn_param->ird, (u16)conn_param->ord);
+       i40iw_record_ird_ord(cm_node, conn_param->ird, conn_param->ord);
        if (cm_node->send_rdma0_op == SEND_RDMA_READ_ZERO &&
            !cm_node->ord_size)
                cm_node->ord_size = 1;