Roland Dreier eabc77935d IB/umad: make sure write()s have sufficient data ... Make sure that userspace passes in enough data when sending a MAD. We always copy at least sizeof (struct ib_user_mad) + IB_MGMT_RMPP_HDR bytes from userspace, so anything less is definitely invalid. Also, if the length is less than this limit, it's possible for the second copy_from_user() to get a negative length and trigger a BUG(). Signed-off-by: Roland Dreier <rolandd@cisco.com>		2005-11-18 14:18:26 -08:00
..
agent.c	[PATCH] fix remaining missing includes	2005-11-07 07:53:41 -08:00
agent.h	[PATCH] missing include in infiniband	2005-10-29 10:35:07 -07:00
cache.c	[PATCH] fix missing includes	2005-10-30 17:37:32 -08:00
cm_msgs.h	[IB] cm: Add missing break in switch	2005-10-20 12:29:36 -07:00
cm.c	[IB] kzalloc() conversions	2005-11-02 07:23:14 -08:00
core_priv.h
device.c	[IB] kzalloc() conversions	2005-11-02 07:23:14 -08:00
fmr_pool.c
mad_priv.h	[IB] Fix MAD layer DMA mappings to avoid touching data buffer once mapped	2005-10-25 10:51:39 -07:00
mad_rmpp.c	[IB] simplify mad_rmpp.c:alloc_response_msg()	2005-10-25 15:13:54 -07:00
mad_rmpp.h	[IB] Fix MAD layer DMA mappings to avoid touching data buffer once mapped	2005-10-25 10:51:39 -07:00
mad.c	[PATCH] kfree cleanup: misc remaining drivers	2005-11-07 07:54:05 -08:00
Makefile	[PATCH] IB: clean up user access config options	2005-09-07 12:43:08 -07:00
packer.c	[PATCH] fix remaining missing includes	2005-11-07 07:53:41 -08:00
sa_query.c	[PATCH] fix missing includes	2005-10-30 17:37:32 -08:00
smi.c
smi.h	[IB] Fix MAD layer DMA mappings to avoid touching data buffer once mapped	2005-10-25 10:51:39 -07:00
sysfs.c	[PATCH] fix remaining missing includes	2005-11-07 07:53:41 -08:00
ucm.c	[IB] kzalloc() conversions	2005-11-02 07:23:14 -08:00
ud_header.c	[PATCH] fix remaining missing includes	2005-11-07 07:53:41 -08:00
user_mad.c	IB/umad: make sure write()s have sufficient data	2005-11-18 14:18:26 -08:00
uverbs_cmd.c	[IB] uverbs: have kernel return QP capabilities	2005-11-10 10:22:50 -08:00
uverbs_main.c	[IB] kzalloc() conversions	2005-11-02 07:23:14 -08:00
uverbs_mem.c
uverbs.h	[IB] uverbs: Avoid NULL pointer deref on CQ async event	2005-10-31 07:10:32 -08:00
verbs.c	Merge branch 'for-linus' of master.kernel.org:/pub/scm/linux/kernel/git/roland/infiniband	2005-11-10 13:27:06 -08:00