diff options
| author | Jareer Abdel-Qader <jareer.h.abdel-qader@intel.com> | 2015-10-26 10:28:33 -0400 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2015-10-27 17:19:22 +0900 |
| commit | 07839049db8e07c1a0ade9a102b2261cd50ac2c1 (patch) | |
| tree | 331d7135bb404c07856616f5696983f2dcca0185 /drivers/staging/rdma | |
| parent | f4d26d81ad7f599159511ca8d1a81b82dad474f6 (diff) | |
| download | blackbird-op-linux-07839049db8e07c1a0ade9a102b2261cd50ac2c1.tar.gz blackbird-op-linux-07839049db8e07c1a0ade9a102b2261cd50ac2c1.zip | |
staging/rdma/hfi1: close shared context security hole
Driver does not verify userid for shared context assignments, allowing
malicious user access.
Reviewed by: Mike Marciniszyn <mike.marciniszyn@intel.com>
Signed-off-by: Jareer H Abdel-Qader <jareer.h.abdel-qader@intel.com>
Signed-off-by: Ira Weiny <ira.weiny@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/staging/rdma')
| -rw-r--r-- | drivers/staging/rdma/hfi1/file_ops.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/staging/rdma/hfi1/file_ops.c b/drivers/staging/rdma/hfi1/file_ops.c index cbaf4f734add..955f80dfecf6 100644 --- a/drivers/staging/rdma/hfi1/file_ops.c +++ b/drivers/staging/rdma/hfi1/file_ops.c @@ -948,6 +948,7 @@ static int find_shared_ctxt(struct file *fp, /* Skip ctxt if it doesn't match the requested one */ if (memcmp(uctxt->uuid, uinfo->uuid, sizeof(uctxt->uuid)) || + uctxt->jkey != generate_jkey(current_uid()) || uctxt->subctxt_id != uinfo->subctxt_id || uctxt->subctxt_cnt != uinfo->subctxt_cnt) continue; |
