From 092b7ee85b750e3a63f90841fe7d20cfab35c861 Mon Sep 17 00:00:00 2001 From: Sean Hefty Date: Wed, 22 Sep 2010 17:13:53 +0000 Subject: [PATCH] librdmacm: validate user private data size Check private data size to avoid overrunning the winverbs data buffer. Signed-off-by: Sean Hefty git-svn-id: svn://openib.tc.cornell.edu/gen1@2947 ad392aa1-c5ef-ae45-8dd8-e69d62a5ef86 --- trunk/ulp/librdmacm/src/cma.cpp | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/trunk/ulp/librdmacm/src/cma.cpp b/trunk/ulp/librdmacm/src/cma.cpp index 835d0204..215bdf6a 100644 --- a/trunk/ulp/librdmacm/src/cma.cpp +++ b/trunk/ulp/librdmacm/src/cma.cpp @@ -765,6 +765,10 @@ static int ucma_valid_param(struct cma_id_private *id_priv, return rdma_seterrno(EINVAL); } + if (param->private_data_len > sizeof(((WV_CONNECT_PARAM *) NULL)->Data)) { + return rdma_seterrno(EINVAL); + } + return 0; } -- 2.41.0