linux/drivers/infiniband/hw/mlx4
Dan Carpenter 54a6d63f14 IB/mlx4: Potential buffer overflow in _mlx4_set_path()
Smatch complains about this code:

    drivers/infiniband/hw/mlx4/qp.c:1827 _mlx4_set_path()
    error: buffer overflow 'dev->dev->caps.gid_table_len' 3 <= 255

The mlx4_ib_gid_index_to_real_index() does check that "port" is within
bounds, but we don't check the return value for errors.  It seems simple
enough to add a check for that.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Leon Romanovsky <leonro@mellanox.com>
Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
2017-12-13 11:00:14 -07:00
..
ah.c IB: Let ib_core resolve destination mac address 2017-10-18 12:10:36 -04:00
alias_GUID.c IB/mlx4: Fix some spelling mistakes 2017-08-24 16:27:10 -04:00
cm.c IB/mlx4: Fix CM REQ retries in paravirt mode 2017-07-20 11:20:50 -04:00
cq.c IB/mlx4: Add contig support for control objects 2017-11-13 14:42:04 -05:00
doorbell.c IB: Refactor umem to use linear SG table 2014-03-04 10:34:28 -08:00
Kconfig net: mellanox: add DEVLINK dependencies 2016-03-03 17:08:59 -05:00
mad.c Add OPA extended LID support 2017-08-18 14:47:37 -04:00
main.c IB/mlx4: Add CQ moderation capability to query_device 2017-11-13 16:59:22 -05:00
Makefile IB/mlx4: Add iov directory in sysfs under the ib device 2012-09-30 20:33:39 -07:00
mcg.c IB/mlx4: Suppress gcc 7 fall-through complaints 2017-10-14 20:47:06 -04:00
mlx4_ib.h IB/mlx4: Exposing modify CQ callback to uverbs layer 2017-11-13 16:59:22 -05:00
mr.c IB/mlx4: Add contig support for control objects 2017-11-13 14:42:04 -05:00
qp.c IB/mlx4: Potential buffer overflow in _mlx4_set_path() 2017-12-13 11:00:14 -07:00
srq.c IB/core: Separate CQ handle in SRQ context 2017-08-29 08:30:16 -04:00
sysfs.c IB/mlx4: fix sprintf format warning 2017-09-13 18:53:15 -07:00