summaryrefslogtreecommitdiffstats
path: root/drivers/infiniband/core
diff options
context:
space:
mode:
authorChien Tin Tung2018-03-21 19:09:25 +0100
committerJason Gunthorpe2018-03-21 21:22:22 +0100
commit5f3e3b85cc0a5eae1c46d72e47d3de7bf208d9e2 (patch)
tree2a33788bc07a22f5d022ed476b3b177a4a061b00 /drivers/infiniband/core
parentRDMA/restrack: Move restrack_clean to be symmetrical to restrack_init (diff)
downloadkernel-qcow2-linux-5f3e3b85cc0a5eae1c46d72e47d3de7bf208d9e2.tar.gz
kernel-qcow2-linux-5f3e3b85cc0a5eae1c46d72e47d3de7bf208d9e2.tar.xz
kernel-qcow2-linux-5f3e3b85cc0a5eae1c46d72e47d3de7bf208d9e2.zip
RDMA/ucma: Correct option size check using optlen
The option size check is using optval instead of optlen causing the set option call to fail. Use the correct field, optlen, for size check. Fixes: 6a21dfc0d0db ("RDMA/ucma: Limit possible option size") Signed-off-by: Chien Tin Tung <chien.tin.tung@intel.com> Signed-off-by: Shiraz Saleem <shiraz.saleem@intel.com> Reviewed-by: Leon Romanovsky <leonro@mellanox.com> Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
Diffstat (limited to 'drivers/infiniband/core')
-rw-r--r--drivers/infiniband/core/ucma.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/infiniband/core/ucma.c b/drivers/infiniband/core/ucma.c
index e5a1e7d81326..60449d611fb4 100644
--- a/drivers/infiniband/core/ucma.c
+++ b/drivers/infiniband/core/ucma.c
@@ -1307,7 +1307,7 @@ static ssize_t ucma_set_option(struct ucma_file *file, const char __user *inbuf,
if (IS_ERR(ctx))
return PTR_ERR(ctx);
- if (unlikely(cmd.optval > KMALLOC_MAX_SIZE))
+ if (unlikely(cmd.optlen > KMALLOC_MAX_SIZE))
return -EINVAL;
optval = memdup_user((void __user *) (unsigned long) cmd.optval,