[4.9,040/271] RDMA/qedr: Fix out of bounds index check in query pkey

From: Gal Pressman <galpress@amazon.com>

From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
	stable@vger.kernel.org, Gal Pressman <galpress@amazon.com>,
	Michal Kalderon <michal.kalderon@marvell.com>,
	Jason Gunthorpe <jgg@mellanox.com>, Sasha Levin <sashal@kernel.org>
Subject: [PATCH 4.9 040/271] RDMA/qedr: Fix out of bounds index check in
	query pkey
Date: Tue, 28 Jan 2020 15:03:09 +0100
Message-Id: <20200128135855.648442525@linuxfoundation.org>
In-Reply-To: <20200128135852.449088278@linuxfoundation.org>
References: <20200128135852.449088278@linuxfoundation.org>
User-Agent: quilt/0.66
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Sender: stable-owner@vger.kernel.org
Precedence: bulk

Message ID	20200128135855.648442525@linuxfoundation.org
State	New
Headers	show Return-Path: <SRS0=oJ2n=3R=vger.kernel.org=stable-owner@kernel.org> From: Greg Kroah-Hartman <gregkh@linuxfoundation.org> To: linux-kernel@vger.kernel.org Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>, stable@vger.kernel.org, Gal Pressman <galpress@amazon.com>, Michal Kalderon <michal.kalderon@marvell.com>, Jason Gunthorpe <jgg@mellanox.com>, Sasha Levin <sashal@kernel.org> Subject: [PATCH 4.9 040/271] RDMA/qedr: Fix out of bounds index check in query pkey Date: Tue, 28 Jan 2020 15:03:09 +0100 Message-Id: <20200128135855.648442525@linuxfoundation.org> In-Reply-To: <20200128135852.449088278@linuxfoundation.org> References: <20200128135852.449088278@linuxfoundation.org> User-Agent: quilt/0.66 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Sender: stable-owner@vger.kernel.org Precedence: bulk
Series	None \| expand [4.9,003/271] mt7601u: fix bbp version check in mt7601u_wait_bbp_ready [4.9,004/271] drm/sti: do not remove the drm_bridge that was never added [4.9,007/271] IB/rxe: replace kvfree with vfree [4.9,009/271] staging: comedi: ni_mio_common: protect register write overflow [4.9,011/271] mlxsw: reg: QEEC: Add minimum shaper fields [4.9,013/271] exportfs: fix passing zero to ERR_PTR() warning [4.9,015/271] net: phy: Fix not to call phy_resume() if PHY is not attached [4.9,016/271] pinctrl: sh-pfc: r8a7740: Add missing REF125CK pin to gether_gmii group [4.9,019/271] pinctrl: sh-pfc: r8a7791: Remove bogus marks from vin1_b_data18 group [4.9,020/271] pinctrl: sh-pfc: sh73a0: Add missing TO pin to tpu4_to3 group [4.9,022/271] pinctrl: sh-pfc: sh7734: Add missing IPSR11 field [4.9,024/271] pinctrl: sh-pfc: sh7734: Remove bogus IPSR10 value [4.9,025/271] Input: nomadik-ske-keypad - fix a loop timeout test [4.9,029/271] clk: samsung: exynos4: fix refcount leak in exynos4_get_xom() [4.9,030/271] clk: imx6q: fix refcount leak in imx6q_clocks_init() [4.9,034/271] clk: armada-370: fix refcount leak in a370_clk_init() [4.9,036/271] clk: armada-xp: fix refcount leak in axp_clk_init() [4.9,037/271] clk: dove: fix refcount leak in dove_clk_init() [4.9,040/271] RDMA/qedr: Fix out of bounds index check in query pkey [4.9,041/271] arm64: dts: apq8016-sbc: Increase load on l11 for SDCARD [4.9,045/271] ASoC: imx-sgtl5000: put of nodes if finding codec fails [4.9,047/271] rtc: cmos: ignore bogus century byte [4.9,048/271] clk: sunxi-ng: sun8i-a23: Enable PLL-MIPI LDOs when ungating it [4.9,050/271] tty: ipwireless: Fix potential NULL pointer dereference [4.9,053/271] ARM: dts: lpc32xx: reparent keypad controller to SIC1 [4.9,055/271] ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller clocks property [4.9,056/271] ARM: dts: lpc32xx: phy3250: fix SD card regulator voltage [4.9,057/271] iwlwifi: mvm: fix RSS config command [4.9,060/271] thermal: mediatek: fix register index error [4.9,061/271] net: phy: fixed_phy: Fix fixed_phy not checking GPIO [4.9,062/271] rtc: 88pm860x: fix unintended sign extension [4.9,065/271] fbdev: chipsfb: remove set but not used variable size [4.9,067/271] iw_cxgb4: use tos when finding ipv6 routes [4.9,069/271] pinctrl: sh-pfc: r8a7791: Fix scifb2_data_c pin group [4.9,073/271] block: dont use bio->bi_vcnt to figure out segment number [4.9,074/271] keys: Timestamp new keys [4.9,077/271] cdc-wdm: pass return value of recover_from_urb_loss [4.9,079/271] regulator: pv88080: Fix array out-of-bounds access [4.9,082/271] drm/nouveau/bios/ramcfg: fix missing parentheses when calculating RON [4.9,083/271] drm/nouveau/pmu: dont print reply values if exec is false [4.9,085/271] fs/nfs: Fix nfs_parse_devname to not modify its argument [4.9,087/271] clocksource/drivers/sun5i: Fail gracefully when clock rate is unavailable [4.9,089/271] mmc: sdhci-brcmstb: handle mmc_of_parse() errors during probe [4.9,091/271] ARM: 8848/1: virt: Align GIC version check with arm64 counterpart [4.9,092/271] regulator: wm831x-dcdc: Fix list of wm831x_dcdc_ilim from mA to uA [4.9,094/271] scsi: megaraid_sas: reduce module load time [4.9,095/271] drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen() [4.9,097/271] net: sh_eth: fix a missing check of of_get_phy_mode [4.9,099/271] media: cx18: update *pos correctly in cx18_read_pos() [4.9,102/271] regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB [4.9,103/271] jfs: fix bogus variable self-initialization [4.9,106/271] ARM: OMAP2+: Fix potentially uninitialized return value for _setup_reset() [4.9,108/271] media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame [4.9,109/271] spi: tegra114: clear packed bit for unpacked mode [4.9,111/271] soc/fsl/qe: Fix an error code in qe_pin_request() [4.9,114/271] scsi: qla2xxx: Unregister chrdev if module initialization fails [4.9,117/271] tipc: set sysctl_tipc_rmem and named_timeout right range [4.9,119/271] ARM: dts: ls1021: Fix SGMII PCS link remaining down after PHY disconnect [4.9,120/271] media: ov2659: fix unbalanced mutex_lock/unlock [4.9,122/271] dmaengine: axi-dmac: Dont check the number of frames for alignment [4.9,124/271] packet: in recvmsg msg_name return at least sizeof sockaddr_ll [4.9,125/271] ASoC: fix valid stream condition [4.9,127/271] IB/mlx5: Add missing XRC options to QP optional params mask [4.9,128/271] iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU [4.9,131/271] net: ena: fix incorrect test of supported hash function [4.9,132/271] net: ena: fix ena_com_fill_hash_function() implementation [4.9,135/271] media: omap_vout: potential buffer overflow in vidioc_dqbuf() [4.9,136/271] media: davinci/vpbe: array underflow in vpbe_enum_outputs() [4.9,137/271] platform/x86: alienware-wmi: printing the wrong error code [4.9,141/271] kdb: do a sanity check on the cpu in kdb_per_cpu() [4.9,144/271] dmaengine: tegra210-adma: Fix crash during probe [4.9,145/271] spi: spi-fsl-spi: call spi_finalize_current_message() at the end [4.9,146/271] crypto: ccp - fix AES CFB error exposed by new test vectors [4.9,148/271] misc: sgi-xp: Properly initialize buf in xpc_get_rsvd_page_pa [4.9,149/271] iommu: Use right function to get group for device [4.9,150/271] signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig [4.9,151/271] inet: frags: call inet_frags_fini() after unregister_pernet_subsys() [4.9,152/271] media: vivid: fix incorrect assignment operation when setting video mode [4.9,155/271] net: netem: fix backlog accounting for corrupted GSO frames [4.9,156/271] net/af_iucv: always register net_device notifier [4.9,159/271] drm/msm/a3xx: remove TPL1 regs from snapshot [4.9,161/271] dmaengine: hsu: Revert "set HSU_CH_MTSR to memory width" [4.9,164/271] mfd: intel-lpss: Release IDA resources [4.9,165/271] rxrpc: Fix uninitialized error code in rxrpc_send_data_packet() [4.9,169/271] scsi: libfc: fix null pointer dereference on a null lport [4.9,171/271] qed: reduce maximum stack frame size [4.9,172/271] usb: host: xhci-hub: fix extra endianness conversion [4.9,175/271] ALSA: aoa: onyx: always initialize register read value [4.9,178/271] crypto: caam - free resources in case caam_rng registration failed [4.9,180/271] ASoC: es8328: Fix copy-paste error in es8328_right_line_controls [4.9,181/271] ASoC: cs4349: Use PM ops cs4349_runtime_pm [4.9,184/271] ASoC: sun4i-i2s: RX and TX counter registers are swapped [4.9,186/271] mac80211: minstrel_ht: fix per-group max throughput rate initialization [4.9,187/271] mips: avoid explicit UB in assignment of mips_io_port_base [4.9,188/271] ahci: Do not export local variable ahci_em_messages [4.9,189/271] Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()" [4.9,192/271] x86, perf: Fix the dependency of the x86 insn decoder selftest [4.9,193/271] staging: greybus: light: fix a couple double frees [4.9,195/271] iio: dac: ad5380: fix incorrect assignment to val [4.9,198/271] Btrfs: fix hang when loading existing inode cache off disk [4.9,199/271] hwmon: (shtc1) fix shtc1 and shtw1 id mask [4.9,203/271] net: hisilicon: Fix signedness bug in hix5hd2_dev_probe() [4.9,204/271] net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe() [4.9,206/271] of: mdio: Fix a signedness bug in of_phy_get_and_connect() [4.9,209/271] net: stmmac: gmac4+: Not all Unicast addresses may be available [4.9,210/271] mac80211: accept deauth frames in IBSS mode [4.9,213/271] net: stmmac: fix length of PTP clocks name string [4.9,216/271] dmaengine: imx-sdma: fix size check for sdma script_number [4.9,217/271] net: netem: fix error path for corrupted GSO frames [4.9,220/271] afs: Fix large file support [4.9,221/271] media: ov6650: Fix incorrect use of JPEG colorspace [4.9,225/271] net: neigh: use long type to store jiffies delta [4.9,226/271] packet: fix data-race in fanout_flow_is_huge() [4.9,228/271] drm/radeon: fix bad DMA from INTERRUPT_CNTL2 [4.9,230/271] IB/iser: Fix dma_nents type definition [4.9,232/271] net: ethtool: Add back transceiver type [4.9,234/271] can, slip: Protect tty->disc_data in write_wakeup and close with RCU [4.9,236/271] net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM [4.9,237/271] net, ip6_tunnel: fix namespaces move [4.9,240/271] tcp_bbr: improve arithmetic division in bbr_update_bw() [4.9,242/271] gtp: make sure only SOCK_DGRAM UDP sockets are accepted [4.9,244/271] hwmon: (core) Simplify sysfs attribute name allocation [4.9,247/271] hwmon: (core) Do not use device managed functions for memory allocations [4.9,248/271] Input: keyspan-remote - fix control-message timeouts [4.9,252/271] Input: sur40 - fix interface sanity checks [4.9,254/271] Input: aiptek - fix endpoint sanity check [4.9,255/271] Input: pegasus_notetaker - fix endpoint sanity check [4.9,257/271] hwmon: (nct7802) Fix voltage limits to wrong registers [4.9,259/271] tracing: xen: Ordered comparison of function pointers [4.9,260/271] do_last(): fetch directory ->i_mode and ->i_uid before its too late [4.9,262/271] arm64: kpti: Whitelist Cortex-A CPUs that dont implement the CSV3 field [4.9,268/271] md: Avoid namespace collision with bitmap API [4.9,269/271] bitmap: Add bitmap_alloc(), bitmap_zalloc() and bitmap_free() [4.9,271/271] net/x25: fix nonblocking connect

[4.9,040/271] RDMA/qedr: Fix out of bounds index check in query pkey

Commit Message

Patch