[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Tue, 02 Feb 2021 16:50:07 +0000
From: patchwork-bot+netdevbpf@...nel.org
To: Sabyrzhan Tasbolatov <snovitoll@...il.com>
Cc: santosh.shilimkar@...cle.com, davem@...emloft.net, kuba@...nel.org,
netdev@...r.kernel.org, linux-rdma@...r.kernel.org,
rds-devel@....oracle.com, linux-kernel@...r.kernel.org,
syzbot+1bd2b07f93745fa38425@...kaller.appspotmail.com
Subject: Re: [PATCH] net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
Hello:
This patch was applied to netdev/net.git (refs/heads/master):
On Tue, 2 Feb 2021 02:32:33 +0600 you wrote:
> syzbot found WARNING in rds_rdma_extra_size [1] when RDS_CMSG_RDMA_ARGS
> control message is passed with user-controlled
> 0x40001 bytes of args->nr_local, causing order >= MAX_ORDER condition.
>
> The exact value 0x40001 can be checked with UIO_MAXIOV which is 0x400.
> So for kcalloc() 0x400 iovecs with sizeof(struct rds_iovec) = 0x10
> is the closest limit, with 0x10 leftover.
>
> [...]
Here is the summary with links:
- net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
https://git.kernel.org/netdev/net/c/a11148e6fcce
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
Powered by blists - more mailing lists