android_kernel_samsung_msm8976/drivers/infiniband/hw/ipath
Ralph Campbell 30d149ab58 IB/ipath: Fix possible data corruption if multiple SGEs used for receive
The code to copy data from the receive queue buffers to the IB SGEs
doesn't check the SGE length, only the memory region/page length when
copying data.  This could overwrite parts of the user's memory that
were not intended to be written.  It can only happen if multiple SGEs
are used to describe a receive buffer which almost never happens in
practice.

Signed-off-by: Ralph Campbell <ralph.campbell@qlogic.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
2007-07-09 20:12:26 -07:00
..
ipath_common.h IB/ipath: Remove incompletely implemented ipath_runtime flags and code 2007-07-09 20:12:25 -07:00
ipath_cq.c IB: Return "maybe missed event" hint from ib_req_notify_cq() 2007-05-06 21:18:11 -07:00
ipath_debug.h IB/ipath: Change packet problems vs chip errors handling and reporting 2007-04-18 20:20:55 -07:00
ipath_diag.c IB/ipath: Prevent random program use of diags interface 2007-04-18 20:20:59 -07:00
ipath_dma.c [PATCH] fix ipath_dma_free_coherent() prototype 2007-03-14 15:27:49 -07:00
ipath_driver.c IB/ipath: Use S_ABORT not cancel and abort on exit freeze mode after recovery 2007-07-09 20:12:26 -07:00
ipath_eeprom.c IB/ipath: Log "active" time and some errors to EEPROM 2007-07-09 20:12:25 -07:00
ipath_file_ops.c IB/ipath: Change use of constants for TID type to defined values 2007-07-09 20:12:26 -07:00
ipath_fs.c IB/ipath: Fix maximum MTU reporting 2007-07-09 20:12:25 -07:00
ipath_iba6110.c IB/ipath: Use S_ABORT not cancel and abort on exit freeze mode after recovery 2007-07-09 20:12:26 -07:00
ipath_iba6120.c IB/ipath: Use S_ABORT not cancel and abort on exit freeze mode after recovery 2007-07-09 20:12:26 -07:00
ipath_init_chip.c IB/ipath: Use S_ABORT not cancel and abort on exit freeze mode after recovery 2007-07-09 20:12:26 -07:00
ipath_intr.c IB/ipath: Use S_ABORT not cancel and abort on exit freeze mode after recovery 2007-07-09 20:12:26 -07:00
ipath_kernel.h IB/ipath: Use S_ABORT not cancel and abort on exit freeze mode after recovery 2007-07-09 20:12:26 -07:00
ipath_keys.c IB/ipath: Check reserved memory keys 2007-04-18 20:21:00 -07:00
ipath_layer.c PCI: Cleanup the includes of <linux/pci.h> 2007-05-02 19:02:35 -07:00
ipath_layer.h IB/ipath: remove stale references to userspace SMA 2006-09-22 15:22:32 -07:00
ipath_mad.c IB/ipath: Fix maximum MTU reporting 2007-07-09 20:12:25 -07:00
ipath_mmap.c IB/ipath: Don't corrupt pending mmap list when unmapped objects are freed 2007-04-30 17:30:28 -07:00
ipath_mr.c IB/uverbs: Export ib_umem_get()/ib_umem_release() to modules 2007-05-08 18:00:37 -07:00
ipath_qp.c IB/ipath: Fix maximum MTU reporting 2007-07-09 20:12:25 -07:00
ipath_rc.c IB/ipath: Fix RDMA read retry code 2007-07-09 20:12:26 -07:00
ipath_registers.h IB/ipath: Improve handling and reporting of parity errors 2007-04-18 20:20:58 -07:00
ipath_ruc.c IB/ipath: Fix possible data corruption if multiple SGEs used for receive 2007-07-09 20:12:26 -07:00
ipath_srq.c IB/ipath: Don't corrupt pending mmap list when unmapped objects are freed 2007-04-30 17:30:28 -07:00
ipath_stats.c IB/ipath: Log "active" time and some errors to EEPROM 2007-07-09 20:12:25 -07:00
ipath_sysfs.c IB/ipath: Log "active" time and some errors to EEPROM 2007-07-09 20:12:25 -07:00
ipath_uc.c IB/ipath: Set M bit in BTH according to IB spec 2007-07-09 20:12:26 -07:00
ipath_ud.c IB/ipath: Fix possible data corruption if multiple SGEs used for receive 2007-07-09 20:12:26 -07:00
ipath_user_pages.c WorkStruct: make allyesconfig 2006-11-22 14:57:56 +00:00
ipath_verbs.c IB/ipath: Fix possible data corruption if multiple SGEs used for receive 2007-07-09 20:12:26 -07:00
ipath_verbs.h IB/uverbs: Export ib_umem_get()/ib_umem_release() to modules 2007-05-08 18:00:37 -07:00
ipath_verbs_mcast.c IB/ipath: Fix potential deadlock with multicast spinlocks 2007-05-19 08:51:53 -07:00
ipath_wc_ppc64.c IB/ipath: Improved support for PowerPC 2006-09-28 11:16:53 -07:00
ipath_wc_x86_64.c IB/ipath: Fix the mtrr_add args for chips with 2 buffer sizes 2007-07-09 20:12:26 -07:00
Kconfig IB/ipath: Depend on CONFIG_NET 2006-11-20 13:06:19 -08:00
Makefile IB/ipath: Implement new verbs DMA mapping functions 2006-12-12 14:28:28 -08:00