[libibverbs bug] Passing negative size to ibv_rc_pingpong causes seg fault

[Vasant Hegde]

Hi all,

Issue:
    ibv_rc_pingpong with negative size causes segfault

Steps :
    run below command :
        ibv_rc_pingpong -s -2048
        Segmentation fault

Package source :
    git://git.kernel.org/pub/scm/libs/infiniband/libibverbs.git
   
http://www.openfabrics.org/downloads/libibverbs/libibverbs-1.1.4-1.24.gb89d4d7.tar.gz

Solution :
    Currently we are not validating the input size passed by user.
Adding input size validation fixes this issue.

Thanks
Vasant



--
To unsubscribe from this list: send the line "unsubscribe linux-rdma" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html