RDMA/hfi1: Copy userspace arrays safely

Browse source

Currently, memdup_user() is utilized at two positions to copy userspace
arrays. This is done without overflow checks.

Use the new wrapper memdup_array_user() to copy the arrays more safely.

Suggested-by: Dave Airlie <airlied@redhat.com>
Signed-off-by: Philipp Stanner <pstanner@redhat.com>
Link: https://lore.kernel.org/r/20231102191308.52046-2-pstanner@redhat.com
Acked-by: Dennis Dalessandro <dennis.dalessandro@cornelisnetworks.com>
Signed-off-by: Leon Romanovsky <leon@kernel.org>

...

This commit is contained in:

Philipp Stanner 2023-11-02 20:13:09 +01:00 • committed by Leon Romanovsky

parent 476b7c7e00

commit c170d4ff21

2 changed files with 4 additions and 4 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

drivers/infiniband/hw/hfi1/user_exp_rcv.c

View file

4

drivers/infiniband/hw/hfi1/user_sdma.c

View file