linux/drivers/infiniband
Matan Barak 89d9e8d3f1 IB/uverbs: Always use the attribute size provided by the user
This fixes several bugs around the copy_to/from user path:
 - copy_to used the user provided size of the attribute
   and could copy data beyond the end of the kernel buffer into
   userspace.
 - copy_from didn't know the size of the kernel buffer and
   could have left kernel memory unexpectedly un-initialized.
 - copy_from did not use the user length to determine if the
   attribute data is inlined or not.

Signed-off-by: Matan Barak <matanb@mellanox.com>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
2018-02-15 14:59:44 -07:00
..
core IB/uverbs: Always use the attribute size provided by the user 2018-02-15 14:59:44 -07:00
hw vfs: do bulk POLL* -> EPOLL* replacement 2018-02-11 14:34:03 -08:00
sw Second pull request for 4.16 merge window 2018-02-06 11:09:45 -08:00
ulp IB/ipoib: Do not warn if IPoIB debugfs doesn't exist 2018-02-15 14:59:43 -07:00
Kconfig Second pull request for 4.16 merge window 2018-02-06 11:09:45 -08:00
Makefile IB/rdmavt: Create module framework and handle driver registration 2016-03-10 20:37:04 -05:00