linux/drivers/infiniband/hw/mthca
Shiraz Saleem 41d34865b2 RDMA/mthca: Use correct sizing on buffers holding page DMA addresses
The buffer that holds the page DMA addresses is sized off umem->nmap.
This can potentially cause out of bound accesses on the PBL array when
iterating the umem DMA-mapped SGL. This is because if umem pages are
combined, umem->nmap can be much lower than the number of system pages
in umem.

Use ib_umem_num_pages() to size this buffer.

Signed-off-by: Shiraz Saleem <shiraz.saleem@intel.com>
Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
2019-03-28 14:13:27 -03:00
..
Kconfig
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
mthca_allocator.c treewide: kmalloc() -> kmalloc_array() 2018-06-12 16:19:22 -07:00
mthca_av.c RDMA: Convert drivers to use the AH's sgid_attr in post_wr paths 2018-06-18 11:11:27 -06:00
mthca_catas.c treewide: setup_timer() -> timer_setup() (2 field) 2017-11-21 15:57:09 -08:00
mthca_cmd.c treewide: kmalloc() -> kmalloc_array() 2018-06-12 16:19:22 -07:00
mthca_cmd.h
mthca_config_reg.h
mthca_cq.c RDMA: Use __packed annotation instead of __attribute__ ((packed)) 2019-03-25 21:14:12 -03:00
mthca_dev.h RDMA: Cleanup undesired pd->uobject usage 2018-12-18 19:15:48 -07:00
mthca_doorbell.h
mthca_eq.c RDMA: Use __packed annotation instead of __attribute__ ((packed)) 2019-03-25 21:14:12 -03:00
mthca_mad.c RDMA: Mark if destroy address handle is in a sleepable context 2018-12-19 16:28:03 -07:00
mthca_main.c RDMA: Provide safe ib_alloc_device() function 2019-01-30 15:52:30 -07:00
mthca_mcg.c
mthca_memfree.c cross-tree: phase out dma_zalloc_coherent() 2019-01-08 07:58:37 -05:00
mthca_memfree.h
mthca_mr.c RDMA: Use __packed annotation instead of __attribute__ ((packed)) 2019-03-25 21:14:12 -03:00
mthca_pd.c
mthca_profile.c treewide: kzalloc() -> kcalloc() 2018-06-12 16:19:22 -07:00
mthca_profile.h
mthca_provider.c RDMA/mthca: Use correct sizing on buffers holding page DMA addresses 2019-03-28 14:13:27 -03:00
mthca_provider.h
mthca_qp.c RDMA: Use __packed annotation instead of __attribute__ ((packed)) 2019-03-25 21:14:12 -03:00
mthca_reset.c IB/mthca: Remove debug prints after allocation failure 2016-12-03 13:12:52 -05:00
mthca_srq.c IB/{hw,sw}: Remove 'uobject->context' dependency in object creation APIs 2019-02-15 15:38:38 -07:00
mthca_uar.c
mthca_wqe.h