Skip to contentSkip to conversation

Passing negative size to ibv_rc_pingpong causes seg fault

libibverbs bug Vasant Hegde 1 participant 1 message Jan 17, 2012 InfiniBand

lore
Share & tools
lore
#0 lore raw

Hi all,

Issue:
ibv_rc_pingpong with negative size causes segfault

Steps :
run below command :
ibv_rc_pingpong -s -2048
Segmentation fault

Package source :
git://git.kernel.org/pub/scm/libs/infiniband/libibverbs.git

http://www.openfabrics.org/downloads/libibverbs/libibverbs-1.1.4-1.24.gb89d4d7.tar.gz

Solution :
Currently we are not validating the input size passed by user.
Adding input size validation fixes this issue.

Thanks
Vasant

--
To unsubscribe from this list: send the line "unsubscribe linux-rdma" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html