hns has a comp_mask field that was never checked for validity, check
it.

Signed-off-by: Jason Gunthorpe <[email protected]>
---
 drivers/infiniband/hw/hns/hns_roce_qp.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/drivers/infiniband/hw/hns/hns_roce_qp.c 
b/drivers/infiniband/hw/hns/hns_roce_qp.c
index 3d6eb22cbcd940..a27ea85bb06323 100644
--- a/drivers/infiniband/hw/hns/hns_roce_qp.c
+++ b/drivers/infiniband/hw/hns/hns_roce_qp.c
@@ -1130,7 +1130,9 @@ static int set_qp_param(struct hns_roce_dev *hr_dev, 
struct hns_roce_qp *hr_qp,
        }
 
        if (udata) {
-               ret = ib_copy_validate_udata_in(udata, *ucmd, reserved);
+               ret = ib_copy_validate_udata_in_cm(
+                       udata, *ucmd, reserved,
+                       HNS_ROCE_CREATE_QP_MASK_CONGEST_TYPE);
                if (ret)
                        return ret;
 
-- 
2.43.0


Reply via email to