diff options
author | Linus Torvalds <torvalds@linux-foundation.org> | 2013-12-23 17:23:42 -0800 |
---|---|---|
committer | Linus Torvalds <torvalds@linux-foundation.org> | 2013-12-23 17:23:42 -0800 |
commit | 6961bc6c7055d0d1b2a670dbdca2c0165e267514 (patch) | |
tree | 03f5b0f5bd01b3cf496b570f407031f4542b6548 /include | |
parent | f5835372ebedf26847c2b9e193284075cc9c1f7f (diff) | |
parent | 22f12c60e12a4112fdca31582e66fe501600ee2b (diff) | |
download | linux-6961bc6c7055d0d1b2a670dbdca2c0165e267514.tar.gz linux-6961bc6c7055d0d1b2a670dbdca2c0165e267514.tar.bz2 linux-6961bc6c7055d0d1b2a670dbdca2c0165e267514.zip |
Merge tag 'rdma-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/roland/infiniband
Pull infiniband fixes from Roland Dreier:
"Last batch of InfiniBand/RDMA changes for 3.13 / 2014:
- Additional checks for uverbs to ensure forward compatibility,
handle malformed input better.
- Fix potential use-after-free in iWARP connection manager.
- Make a function static"
* tag 'rdma-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/roland/infiniband:
IB/uverbs: Check access to userspace response buffer in extended command
IB/uverbs: Check input length in flow steering uverbs
IB/uverbs: Set error code when fail to consume all flow_spec items
IB/uverbs: Check reserved fields in create_flow
IB/uverbs: Check comp_mask in destroy_flow
IB/uverbs: Check reserved field in extended command header
IB/uverbs: New macro to set pointers to NULL if length is 0 in INIT_UDATA()
IB/core: const'ify inbuf in struct ib_udata
RDMA/iwcm: Don't touch cm_id after deref in rem_ref
RDMA/cxgb4: Make _c4iw_write_mem_dma() static
Diffstat (limited to 'include')
-rw-r--r-- | include/rdma/ib_verbs.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/include/rdma/ib_verbs.h b/include/rdma/ib_verbs.h index 979874c627ee..61e1935c91b1 100644 --- a/include/rdma/ib_verbs.h +++ b/include/rdma/ib_verbs.h @@ -978,7 +978,7 @@ struct ib_uobject { }; struct ib_udata { - void __user *inbuf; + const void __user *inbuf; void __user *outbuf; size_t inlen; size_t outlen; |