diff options
| author | Jack Morgenstein <jackm@dev.mellanox.co.il> | 2007-11-20 21:01:28 (GMT) |
|---|---|---|
| committer | Roland Dreier <rolandd@cisco.com> | 2007-11-20 21:01:28 (GMT) |
| commit | 9ed87fd34c97a998e63505718ce7e107a23c84c3 (patch) | |
| tree | 137e38d8fed9a1b43f34f0ed009ff6ea048ac884 /drivers/net/mlx4/catas.c | |
| parent | 4187b915a0f7eaa69707715e80d9fc253ff6167a (diff) | |
| download | linux-fsl-qoriq-9ed87fd34c97a998e63505718ce7e107a23c84c3.tar.xz | |
mlx4_core: Fix state check in mlx4_qp_modify()
When checking the states passed in, mlx4_qp_modify() accidentally checks
cur_state twice rather than checking cur_state and new_state. Fix this
to make sure that both values are in-bounds.
Since these values may be passed in from userspace, this bug results in
userspace being able to trigger an oops.
Signed-off-by: Jack Morgenstein <jackm@dev.mellanox.co.il>
Cc: stable <stable@kernel.org>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
Diffstat (limited to 'drivers/net/mlx4/catas.c')
0 files changed, 0 insertions, 0 deletions