mirrors/linux
2
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-05-26 01:22:40 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
0dfe452241f4904de497aef01ad2f609ccb9be90
linux/drivers
History
Leon Romanovsky 0dfe452241 RDMA/mlx5: Fix shift overflow in mlx5_ib_create_wq 
[   61.182439] UBSAN: Undefined behaviour in drivers/infiniband/hw/mlx5/qp.c:5366:34
[   61.183673] shift exponent 4294967288 is too large for 32-bit type 'unsigned int'
[   61.185530] CPU: 0 PID: 639 Comm: qp Not tainted 4.18.0-rc1-00037-g4aa1d69a9c60-dirty #96
[   61.186981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-2.fc27 04/01/2014
[   61.188315] Call Trace:
[   61.188661]  dump_stack+0xc7/0x13b
[   61.190427]  ubsan_epilogue+0x9/0x49
[   61.190899]  __ubsan_handle_shift_out_of_bounds+0x1ea/0x22f
[   61.197040]  mlx5_ib_create_wq+0x1c99/0x1d50
[   61.206632]  ib_uverbs_ex_create_wq+0x499/0x820
[   61.213892]  ib_uverbs_write+0x77e/0xae0
[   61.248018]  vfs_write+0x121/0x3b0
[   61.249831]  ksys_write+0xa1/0x120
[   61.254024]  do_syscall_64+0x7c/0x2a0
[   61.256178]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   61.259211] RIP: 0033:0x7f54bab70e99
[   61.262125] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89
[   61.268678] RSP: 002b:00007ffe1541c318 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   61.271076] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f54bab70e99
[   61.273795] RDX: 0000000000000070 RSI: 0000000020000240 RDI: 0000000000000003
[   61.276982] RBP: 00007ffe1541c330 R08: 00000000200078e0 R09: 0000000000000002
[   61.280035] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004005c0
[   61.283279] R13: 00007ffe1541c420 R14: 0000000000000000 R15: 0000000000000000

Cc: <stable@vger.kernel.org> # 4.7
Fixes: 79b20a6c30 ("IB/mlx5: Add receive Work Queue verbs")
Cc: syzkaller <syzkaller@googlegroups.com>
Reported-by: Noa Osherovich <noaos@mellanox.com>
Signed-off-by: Leon Romanovsky <leonro@mellanox.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
2018-08-08 09:47:26 -06:00
..
accessibility
…
acpi
Merge tag 'pwm/for-4.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/thierry.reding/linux-pwm
2018-06-14 16:25:43 +09:00
amba
Merge branch 'for-linus' of git://git.armlinux.org.uk/~rmk/linux-arm
2018-06-06 13:49:25 -07:00
android
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
ata
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
atm
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
auxdisplay
treewide: kmalloc() -> kmalloc_array()
2018-06-12 16:19:22 -07:00
base
Merge tag 'pm-4.18-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm
2018-06-13 07:24:18 -07:00
bcma
Merge tag 'dma-mapping-4.18' of git://git.infradead.org/users/hch/dma-mapping
2018-06-04 10:58:12 -07:00
block
Merge tag 'ceph-for-4.18-rc1' of git://github.com/ceph/ceph-client
2018-06-15 07:24:58 +09:00
bluetooth
Bluetooth: btusb: Add additional device ID for RTL8822BE
2018-05-30 15:45:01 +02:00
bus
Merge tag 'overflow-v4.18-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
2018-06-12 18:28:00 -07:00
cdrom
treewide: kmalloc() -> kmalloc_array()
2018-06-12 16:19:22 -07:00
char
docs: Fix some broken references
2018-06-15 18:10:01 -03:00
clk
docs: Fix some broken references
2018-06-15 18:10:01 -03:00
clocksource
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
connector
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2018-06-06 18:39:49 -07:00
cpufreq
Merge tag 'pm-4.18-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm
2018-06-13 07:24:18 -07:00
cpuidle
Merge tag 'powerpc-4.18-1' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux
2018-06-07 10:23:33 -07:00
crypto
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
dax
Merge tag 'libnvdimm-for-4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm
2018-06-08 17:21:52 -07:00
dca
…
devfreq
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
dio
…
dma
fix a series of Documentation/ broken file name references
2018-06-15 18:10:01 -03:00
dma-buf
…
edac
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
eisa
…
extcon
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
firewire
treewide: kmalloc() -> kmalloc_array()
2018-06-12 16:19:22 -07:00
firmware
Merge branch 'akpm' (patches from Andrew)
2018-06-15 08:51:42 +09:00
fmc
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
fpga
fpga: clarify that unregister functions also free
2018-05-25 18:23:56 +02:00
fsi
…
gpio
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
gpu
Merge tag 'docs-broken-links' of git://linuxtv.org/mchehab/experimental
2018-06-17 05:25:18 +09:00
hid
docs: fix broken references with multiple hints
2018-06-15 18:10:01 -03:00
hsi
…
hv
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
hwmon
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
hwspinlock
Merge tag 'hwlock-v4.18' of git://github.com/andersson/remoteproc
2018-06-11 12:09:19 -07:00
hwtracing
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
i2c
Merge branch 'i2c/for-4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux
2018-06-14 16:21:46 +09:00
ide
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
idle
…
iio
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
infiniband
RDMA/mlx5: Fix shift overflow in mlx5_ib_create_wq
2018-08-08 09:47:26 -06:00
input
docs: Fix some broken references
2018-06-15 18:10:01 -03:00
iommu
Merge tag 'overflow-v4.18-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
2018-06-12 18:28:00 -07:00
ipack
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
irqchip
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
isdn
treewide: Use array_size() in vmalloc()
2018-06-12 16:19:22 -07:00
leds
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
lightnvm
docs: Fix some broken references
2018-06-15 18:10:01 -03:00
macintosh
Merge tag 'powerpc-4.18-1' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux
2018-06-07 10:23:33 -07:00
mailbox
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
mcb
…
md
docs: Fix some broken references
2018-06-15 18:10:01 -03:00
media
Merge tag 'docs-broken-links' of git://linuxtv.org/mchehab/experimental
2018-06-17 05:25:18 +09:00
memory
Merge tag 'overflow-v4.18-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
2018-06-12 18:28:00 -07:00
memstick
treewide: kmalloc() -> kmalloc_array()
2018-06-12 16:19:22 -07:00
message
treewide: kmalloc() -> kmalloc_array()
2018-06-12 16:19:22 -07:00
mfd
Merge branch 'i2c/for-4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux
2018-06-14 16:21:46 +09:00
misc
Merge branch 'i2c/for-4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux
2018-06-14 16:21:46 +09:00
mmc
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
mtd
Merge tag 'overflow-v4.18-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
2018-06-12 18:28:00 -07:00
mux
…
net
RDMA/netdev: Use priv_destructor for netdev cleanup
2018-08-02 20:27:43 -06:00
nfc
treewide: devm_kmalloc() -> devm_kmalloc_array()
2018-06-12 16:19:22 -07:00
ntb
Merge tag 'overflow-v4.18-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
2018-06-12 18:28:00 -07:00
nubus
Merge tag 'char-misc-4.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2018-06-05 16:20:22 -07:00
nvdimm
Merge branch 'for-4.18/mcsafe' into libnvdimm-for-next
2018-06-08 15:16:44 -07:00
nvme
nvmet-rdma: Simplify ib_post_(send|recv|srq_recv)() calls
2018-07-24 16:06:36 -06:00
nvmem
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
of
Merge tag 'overflow-v4.18-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
2018-06-12 18:28:00 -07:00
opp
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
oprofile
treewide: Use array_size() in vmalloc()
2018-06-12 16:19:22 -07:00
parisc
Merge tag 'dma-mapping-4.18' of git://git.infradead.org/users/hch/dma-mapping
2018-06-04 10:58:12 -07:00
parport
docs: Fix some broken references
2018-06-15 18:10:01 -03:00
pci
Merge tag 'overflow-v4.18-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
2018-06-12 18:28:00 -07:00
pcmcia
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
perf
drivers/bus: arm-cci: fix build warnings
2018-05-29 16:38:16 +01:00
phy
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2018-06-06 18:39:49 -07:00
pinctrl
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
platform
fix a series of Documentation/ broken file name references
2018-06-15 18:10:01 -03:00
pnp
Merge tag 'media/v4.18-2' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media
2018-06-07 12:34:37 -07:00
power
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
powercap
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
pps
…
ps3
…
ptp
ptp_qoriq: move some definitions to header file
2018-05-28 23:05:11 -04:00
pwm
Merge tag 'pwm/for-4.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/thierry.reding/linux-pwm
2018-06-14 16:25:43 +09:00
rapidio
treewide: Use array_size() in vmalloc()
2018-06-12 16:19:22 -07:00
ras
…
regulator
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
remoteproc
treewide: use PHYS_ADDR_MAX to avoid type casting ULLONG_MAX
2018-06-15 07:55:25 +09:00
reset
Merge tag 'overflow-v4.18-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
2018-06-12 18:28:00 -07:00
rpmsg
rpmsg: smd: do not use mananged resources for endpoints and channels
2018-06-04 12:35:03 -07:00
rtc
Merge tag 'mfd-next-4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd
2018-06-11 07:20:17 -07:00
s390
treewide: Use array_size() in vzalloc()
2018-06-12 16:19:22 -07:00
sbus
fix a series of Documentation/ broken file name references
2018-06-15 18:10:01 -03:00
scsi
Merge tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi
2018-06-14 16:35:32 +09:00
sfi
…
sh
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
siox
…
slimbus
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
sn
…
soc
treewide: use PHYS_ADDR_MAX to avoid type casting ULLONG_MAX
2018-06-15 07:55:25 +09:00
soundwire
docs: Fix more broken references
2018-06-15 18:11:26 -03:00
spi
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
spmi
…
ssb
…
staging
media: v4l: fix broken video4linux docs locations
2018-06-15 18:10:01 -03:00
target
treewide: Use array_size() in vzalloc()
2018-06-12 16:19:22 -07:00
tc
…
tee
…
thermal
Merge tag 'overflow-v4.18-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
2018-06-12 18:28:00 -07:00
thunderbolt
…
tty
Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground
2018-06-15 07:31:07 +09:00
uio
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
usb
Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground
2018-06-15 07:31:07 +09:00
uwb
treewide: kmalloc() -> kmalloc_array()
2018-06-12 16:19:22 -07:00
vfio
Merge tag 'vfio-v4.18-rc1' of git://github.com/awilliam/linux-vfio
2018-06-12 13:11:26 -07:00
vhost
Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
2018-06-16 06:35:02 +09:00
video
Merge tag 'docs-broken-links' of git://linuxtv.org/mchehab/experimental
2018-06-17 05:25:18 +09:00
virt
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
virtio
Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
2018-06-16 06:35:02 +09:00
visorbus
…
vlynq
…
vme
…
w1
Merge tag 'char-misc-4.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2018-06-05 16:20:22 -07:00
watchdog
Merge tag 'mips_4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/mips/linux
2018-06-12 12:56:02 -07:00
xen
treewide: kvmalloc() -> kvmalloc_array()
2018-06-12 16:19:22 -07:00
zorro
Merge tag 'overflow-v4.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
2018-06-06 17:27:14 -07:00
Kconfig
…
Makefile
…