From: Sean Hefty <sean.hefty@intel.com>
Date: Wed, 22 Sep 2010 17:13:53 +0000 (+0000)
Subject: librdmacm: validate user private data size
X-Git-Url: https://openfabrics.org/gitweb/?a=commitdiff_plain;h=092b7ee85b750e3a63f90841fe7d20cfab35c861;p=~shefty%2Frdma-win.git

librdmacm: validate user private data size

Check private data size to avoid overrunning the winverbs data buffer.

Signed-off-by: Sean Hefty <sean.hefty@intel.com>

git-svn-id: svn://openib.tc.cornell.edu/gen1@2947 ad392aa1-c5ef-ae45-8dd8-e69d62a5ef86
---

diff --git a/trunk/ulp/librdmacm/src/cma.cpp b/trunk/ulp/librdmacm/src/cma.cpp
index 835d0204..215bdf6a 100644
--- a/trunk/ulp/librdmacm/src/cma.cpp
+++ b/trunk/ulp/librdmacm/src/cma.cpp
@@ -765,6 +765,10 @@ static int ucma_valid_param(struct cma_id_private *id_priv,
 		return rdma_seterrno(EINVAL);
 	}
 
+	if (param->private_data_len > sizeof(((WV_CONNECT_PARAM *) NULL)->Data)) {
+		return rdma_seterrno(EINVAL);
+	}
+
 	return 0;
 }