Gustavo A. R. Silva 119d4350a5 RDMA/core: Use size_{add,sub,mul}() in calls to struct_size() ...

[ Upstream commit 81760bedc6 ]

If, for any reason, the open-coded arithmetic causes a wraparound,
the protection that `struct_size()` provides against potential integer
overflows is defeated. Fix this by hardening calls to `struct_size()`
with `size_add()`, `size_sub()` and `size_mul()`.

Fixes: 467f432a52 ("RDMA/core: Split port and device counter sysfs attributes")
Fixes: a4676388e2 ("RDMA/core: Simplify how the gid_attrs sysfs is created")
Fixes: e9dd5daf88 ("IB/umad: Refactor code to use cdev_device_add()")
Fixes: 324e227ea7 ("RDMA/device: Add ib_device_get_by_netdev()")
Fixes: 5aad26a7ea ("IB/core: Use struct_size() in kzalloc()")
Signed-off-by: Gustavo A. R. Silva <gustavoars@kernel.org>
Link: https://lore.kernel.org/r/ZQdt4NsJFwwOYxUR@work
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-11-20 11:59:18 +01:00

..

addr.c

RDMA/core: Delete useless module.h include

2022-01-28 13:03:12 -04:00

agent.c

…

agent.h

…

cache.c

Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma

2023-09-01 16:49:33 -07:00

cgroup.c

…

cm_msgs.h

RDMA/core: Add necessary spaces

2021-04-12 14:52:22 -03:00

cm_trace.c

…

cm_trace.h

trace: Relocate event helper files

2022-12-10 11:01:12 -05:00

cm.c

RDMA/cm: Trace icm_send_rej event before the cm state is reset

2023-04-09 12:52:57 +03:00

cma_configfs.c

RDMA/cma: Fix truncation compilation warning in make_cma_ports

2023-09-18 11:52:10 +03:00

cma_priv.h

RDMA/core: Add an rb_tree that stores cm_ids sorted by ifindex and remote IP

2022-06-16 09:54:35 +03:00

cma_trace.c

…

cma_trace.h

trace: Relocate event helper files

2022-12-10 11:01:12 -05:00

cma.c

RDMA/cma: Initialize ib_sa_multicast structure to 0 when join

2023-10-02 13:10:40 +03:00

core_priv.h

RDMA/core: Create clean QP creations interface for uverbs

2021-08-03 15:26:19 -03:00

counters.c

RDMA/counter: Add optional counter support

2021-10-12 12:48:05 -03:00

cq.c

RDMA/core: Delete useless module.h include

2022-01-28 13:03:12 -04:00

device.c

RDMA/core: Use size_{add,sub,mul}() in calls to struct_size()

2023-11-20 11:59:18 +01:00

ib_core_uverbs.c

…

iwcm.c

RDMA/iwcm: Release resources if iw_cm module initialization fails

2021-07-30 10:01:40 -03:00

iwcm.h

RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private

2021-06-08 14:35:44 -03:00

iwpm_msg.c

RDMA/iwpm: Rely on the rdma_nl_[un]register() to ensure that requests are valid

2021-07-30 10:01:41 -03:00

iwpm_util.c

RDMA: Remove unnecessary NULL values

2023-08-07 16:56:57 +03:00

iwpm_util.h

RDMA/core: Delete useless module.h include

2022-01-28 13:03:12 -04:00

lag.c

RDMA/core: Remove 'device' argument from rdma_build_skb()

2022-08-28 14:29:07 +03:00

mad_priv.h

RDMA/core: Remove refcount from struct ib_mad_snoop_private

2021-06-08 14:43:28 -03:00

mad_rmpp.c

RDMA/core: Remove redundant spaces

2021-04-12 14:56:48 -03:00

mad_rmpp.h

…

mad.c

IB/mad: Don't call to function that might sleep while in atomic context

2022-11-10 10:57:15 +02:00

Makefile

RDMA/umem: Support importing dma-buf as user memory region

2021-01-20 16:07:52 -04:00

mr_pool.c

…

multicast.c

RDMA/core: Use refcount_t instead of atomic_t on refcount of mcast_port

2021-06-08 14:45:07 -03:00

netlink.c

RDMA: Remove unnecessary ternary operators

2023-07-31 15:16:12 +03:00

nldev.c

RDMA/core: Require admin capabilities to set system parameters

2023-10-05 20:01:47 +03:00

opa_smi.h

RDMA: Support more than 255 rdma ports

2021-03-26 09:31:21 -03:00

packer.c

…

rdma_core.c

RDMA: Correct duplicated words in comments

2022-06-24 16:52:28 -03:00

rdma_core.h

…

restrack.c

RDMA/restrack: Release MR restrack when delete

2022-11-15 09:56:32 +02:00

restrack.h

…

roce_gid_mgmt.c

IB: Fix repeated words 'the the' comments

2022-07-22 12:02:29 -03:00

rw.c

RDMA/rw: drop pci_p2pdma_[un]map_sg()

2022-07-26 07:28:07 -04:00

sa_query.c

RDMA/core: Use size_{add,sub,mul}() in calls to struct_size()

2023-11-20 11:59:18 +01:00

sa.h

RDMA: Support more than 255 rdma ports

2021-03-26 09:31:21 -03:00

security.c

IB/core: Removed port validity check from ib_get_cached_subnet_prefix

2021-06-21 20:49:32 -03:00

smi.c

RDMA: Support more than 255 rdma ports

2021-03-26 09:31:21 -03:00

smi.h

RDMA: Support more than 255 rdma ports

2021-03-26 09:31:21 -03:00

sysfs.c

RDMA/core: Use size_{add,sub,mul}() in calls to struct_size()

2023-11-20 11:59:18 +01:00

trace.c

…

ucma.c

RDMA/core: Rename rdma_route.num_paths field to num_pri_alt_paths

2022-09-22 12:35:13 +03:00

ud_header.c

RDMA/core: Fix incorrect print format specifier

2021-06-21 15:38:30 -03:00

umem_dmabuf.c

RDMA/umem: Use dma-buf locked API to solve deadlock

2023-01-31 10:24:49 -04:00

umem_odp.c

Merge tag 'v6.0' into rdma.git for-next

2022-10-06 19:48:45 -03:00

umem.c

RDMA/umem: Set iova in ODP flow

2023-07-31 11:38:38 +03:00

user_mad.c

RDMA/core: Use size_{add,sub,mul}() in calls to struct_size()

2023-11-20 11:59:18 +01:00

uverbs_cmd.c

RDMA/uverbs: Restrict usage of privileged QKEYs

2023-06-11 11:26:06 +03:00

uverbs_ioctl.c

RDMA/core: Add UVERBS_ATTR_RAW_FD

2022-09-27 10:15:24 -03:00

uverbs_main.c

RDMA/uverbs: Fix typo of sizeof argument

2023-09-11 15:01:09 +03:00

uverbs_marshall.c

RDMA/core: Don't infoleak GRH fields

2022-01-05 16:30:19 -04:00

uverbs_std_types_async_fd.c

RDMA/core: Make FD destroy callback void

2020-11-12 12:32:17 -04:00

uverbs_std_types_counters.c

IB/uverbs: Fix an potential error pointer dereference

2023-08-07 16:49:59 +03:00

uverbs_std_types_cq.c

RDMA/core: Postpone uobject cleanup on failure till FD close

2020-11-12 12:32:17 -04:00

uverbs_std_types_device.c

RDMA/uverbs: Fix a NULL vs IS_ERR() bug

2021-05-19 15:32:07 -03:00

uverbs_std_types_dm.c

RDMA/core: Postpone uobject cleanup on failure till FD close

2020-11-12 12:32:17 -04:00

uverbs_std_types_flow_action.c

RDMA/core: Delete IPsec flow action logic from the core

2022-04-09 08:25:06 +03:00

uverbs_std_types_mr.c

RDMA/uverbs: Track dmabuf memory regions

2021-08-19 09:59:53 -03:00

uverbs_std_types_qp.c

IB/uverbs: fix the typo of optional

2022-10-19 09:46:45 +03:00

uverbs_std_types_srq.c

RDMA/core: Postpone uobject cleanup on failure till FD close

2020-11-12 12:32:17 -04:00

uverbs_std_types_wq.c

RDMA/core: Postpone uobject cleanup on failure till FD close

2020-11-12 12:32:17 -04:00

uverbs_std_types.c

RDMA/core: Make FD destroy callback void

2020-11-12 12:32:17 -04:00

uverbs_uapi.c

RDMA/uverbs: Check for null return of kmalloc_array

2022-01-05 14:16:53 -04:00

uverbs.h

RDMA/core: Use refcount_t instead of atomic_t on refcount of ib_uverbs_device

2021-06-08 15:04:36 -03:00

verbs.c

IB/core: Add more speed parsing in ib_get_width_and_speed()

2023-08-13 10:41:57 +03:00