Reviewed-by: Jacob Moroni <[email protected]>

On Wed, Mar 25, 2026 at 5:27 PM Jason Gunthorpe <[email protected]> wrote:
>
> irdma has a comp_mask field that was never checked for validity, check
> it.
>
> Signed-off-by: Jason Gunthorpe <[email protected]>
> ---
>  drivers/infiniband/hw/irdma/verbs.c | 4 +++-
>  1 file changed, 3 insertions(+), 1 deletion(-)
>
> diff --git a/drivers/infiniband/hw/irdma/verbs.c 
> b/drivers/infiniband/hw/irdma/verbs.c
> index b2978632241900..d695130b187bdd 100644
> --- a/drivers/infiniband/hw/irdma/verbs.c
> +++ b/drivers/infiniband/hw/irdma/verbs.c
> @@ -296,7 +296,9 @@ static int irdma_alloc_ucontext(struct ib_ucontext *uctx,
>         if (udata->outlen < IRDMA_ALLOC_UCTX_MIN_RESP_LEN)
>                 return -EINVAL;
>
> -       ret = ib_copy_validate_udata_in(udata, req, rsvd8);
> +       ret = ib_copy_validate_udata_in_cm(udata, req, rsvd8,
> +                                          IRDMA_ALLOC_UCTX_USE_RAW_ATTR |
> +                                                  
> IRDMA_SUPPORT_WQE_FORMAT_V2);
>         if (ret)
>                 return ret;
>
> --
> 2.43.0
>
>

Reply via email to