hns has a comp_mask field that was never checked for validity, check
it.
Signed-off-by: Jason Gunthorpe <[email protected]>
---
drivers/infiniband/hw/hns/hns_roce_qp.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/drivers/infiniband/hw/hns/hns_roce_qp.c
b/drivers/infiniband/hw/hns/hns_roce_qp.c
index 3d6eb22cbcd940..a27ea85bb06323 100644
--- a/drivers/infiniband/hw/hns/hns_roce_qp.c
+++ b/drivers/infiniband/hw/hns/hns_roce_qp.c
@@ -1130,7 +1130,9 @@ static int set_qp_param(struct hns_roce_dev *hr_dev,
struct hns_roce_qp *hr_qp,
}
if (udata) {
- ret = ib_copy_validate_udata_in(udata, *ucmd, reserved);
+ ret = ib_copy_validate_udata_in_cm(
+ udata, *ucmd, reserved,
+ HNS_ROCE_CREATE_QP_MASK_CONGEST_TYPE);
if (ret)
return ret;
--
2.43.0