qemu/hw/rdma
Prasad J Pandit 0e68373cc2 rdma: check num_sge does not exceed MAX_SGE
rdma back-end has scatter/gather array ibv_sge[MAX_SGE=4] set
to have 4 elements. A guest could send a 'PvrdmaSqWqe' ring element
with 'num_sge' set to > MAX_SGE, which may lead to OOB access issue.
Add check to avoid it.

Reported-by: Saar Amar <saaramar5@gmail.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Reviewed-by: Yuval Shaia <yuval.shaia@oracle.com>
Signed-off-by: Marcel Apfelbaum <marcel.apfelbaum@gmail.com>
2018-12-22 11:09:57 +02:00
..
vmw pvrdma: release device resources in case of an error 2018-12-22 11:09:57 +02:00
Makefile.objs config: split PVRDMA from RDMA 2018-08-18 18:01:34 +03:00
rdma_backend_defs.h hw/pvrdma: Add support to allow guest to configure GID table 2018-12-22 11:09:56 +02:00
rdma_backend.c rdma: check num_sge does not exceed MAX_SGE 2018-12-22 11:09:57 +02:00
rdma_backend.h hw/pvrdma: Fill all CQE fields 2018-12-22 11:09:56 +02:00
rdma_rm_defs.h hw/rdma: Remove unneeded code that handles more that one port 2018-12-22 11:09:56 +02:00
rdma_rm.c hw/rdma: Do not call rdma_backend_del_gid on an empty gid 2018-12-22 11:09:57 +02:00
rdma_rm.h hw/rdma: Remove unneeded code that handles more that one port 2018-12-22 11:09:56 +02:00
rdma_utils.c Clean up includes 2018-12-20 10:29:08 +01:00
rdma_utils.h hw/rdma: Initialize node_guid from vmxnet3 mac address 2018-12-22 11:09:56 +02:00
trace-events hw/rdma: Implementation of generic rdma device layers 2018-02-19 13:03:24 +02:00