git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e07cccf) | patch
IB/mad: Check hop count field in directed route MAD to avoid array overflow
authorRoland Dreier <rolandd@cisco.com>
Sun, 6 Sep 2009 03:24:10 +0000 (20:24 -0700)
committerRoland Dreier <rolandd@cisco.com>
Sun, 6 Sep 2009 03:24:10 +0000 (20:24 -0700)
commit60f2b652f54aa4ac4127a538abad05235fb9c469
tree318e85dba297fe9eff4c633073426509e093f834tree | snapshot
parente07cccf4046978df10f2e13fe2b99b2f9b3a65dbcommit | diff
IB/mad: Check hop count field in directed route MAD to avoid array overflow

The hop count field in a directed route MAD is only allowed to be in the
range 0 to 63 (by spec).  Check that this really is the case to avoid
accessing outside the bounds of the hop array.

Reported-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
drivers/infiniband/core/smi.c diff | blob | history
Full containers within linux kernel