diff options
| author | Ralph Campbell <ralph.campbell@qlogic.com> | 2010-06-18 03:13:59 +0400 |
|---|---|---|
| committer | Roland Dreier <rolandd@cisco.com> | 2010-07-07 01:13:21 +0400 |
| commit | 5df4223a444057e433e9e4f2e101ee7159f8c19d (patch) | |
| tree | 79022d504cfb79c471a2b25d2b6396a516bd88c3 /drivers/infiniband | |
| parent | b9e03e0489a8616fc415e62128d05ad0159a20a2 (diff) | |
| download | linux-5df4223a444057e433e9e4f2e101ee7159f8c19d.tar.xz | |
IB/qib: Clear eager buffer memory for each new process
The eager buffers are not being cleared before being mmapped into a
new user address space. This is a potential security risk and should
be fixed. Note that the eager header queue is already being cleared.
Signed-off-by: Ralph Campbell <ralph.campbell@qlogic.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
Diffstat (limited to 'drivers/infiniband')
| -rw-r--r-- | drivers/infiniband/hw/qib/qib_init.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/drivers/infiniband/hw/qib/qib_init.c b/drivers/infiniband/hw/qib/qib_init.c index 25895991dc52..1d4db4b19d76 100644 --- a/drivers/infiniband/hw/qib/qib_init.c +++ b/drivers/infiniband/hw/qib/qib_init.c @@ -1472,6 +1472,9 @@ int qib_setup_eagerbufs(struct qib_ctxtdata *rcd) dma_addr_t pa = rcd->rcvegrbuf_phys[chunk]; unsigned i; + /* clear for security and sanity on each use */ + memset(rcd->rcvegrbuf[chunk], 0, size); + for (i = 0; e < egrcnt && i < egrperchunk; e++, i++) { dd->f_put_tid(dd, e + egroff + (u64 __iomem *) |