diff options
| author | Selvin Xavier <selvin.xavier@broadcom.com> | 2026-09-21 23:12:25 -0700 |
|---|---|---|
| committer | Leon Romanovsky <leon@kernel.org> | 2026-09-29 04:41:46 -0400 |
| commit | 1894ed9a664d19c190ce1bd2146759efbae77e4b (patch) | |
| tree | a54cc1e288dd296c29b984155195eca7187c9c3d /tools/lib/python | |
| parent | 81551ece0864c346080d241719d458c93f0e7fc9 (diff) | |
RDMA/bnxt_re: Validate SRQ max_sge at create time
bnxt_re_create_srq() stored attr.max_sge into srq->qplib_srq.max_sge
unvalidated, which defeats the num_sge check in
bnxt_re_post_srq_recv() since that check compares against this same
attacker-chosen value. Reject max_sge > dev_attr->max_srq_sges at
create time, and clamp dev_attr->max_srq_sges to BNXT_STATIC_MAX_SGE
since SRQ WQEs use the fixed-size SGE array.
Fixes: 37cb11acf1f7 ("RDMA/bnxt_re: Add SRQ support for Broadcom adapters")
Signed-off-by: Selvin Xavier <selvin.xavier@broadcom.com>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Diffstat (limited to 'tools/lib/python')
0 files changed, 0 insertions, 0 deletions