librdmacm: validate user private data size

Check private data size to avoid overrunning the winverbs data buffer.

Signed-off-by: Sean Hefty <sean.hefty@intel.com>
git-svn-id: svn://openib.tc.cornell.edu/gen1@2947 ad392aa1-c5ef-ae45-8dd8-e69d62a5ef86

diff --git a/trunk/ulp/librdmacm/src/cma.cpp b/trunk/ulp/librdmacm/src/cma.cpp
index 835d0204dee7f73e709ec420d4ea7b2a1e2ab05e..215bdf6a10ac9211ec70b1d9b588fbca0c2ca06b 100644 (file)
--- a/trunk/ulp/librdmacm/src/cma.cpp
+++ b/trunk/ulp/librdmacm/src/cma.cpp
@@ -765,6 +765,10 @@ static int ucma_valid_param(struct cma_id_private *id_priv,
                return rdma_seterrno(EINVAL);\r
        }\r
 \r
+       if (param->private_data_len > sizeof(((WV_CONNECT_PARAM *) NULL)->Data)) {\r
+               return rdma_seterrno(EINVAL);\r
+       }\r
+\r
        return 0;\r
 }\r
 \r