From: Ralph Campbell Date: Thu, 17 Jun 2010 23:13:59 +0000 (+0000) Subject: IB/qib: Clear eager buffer memory for each new process X-Git-Tag: v2.6.35-rc5~9^2^3~4 X-Git-Url: http://bbs.cooldavid.org/git/?a=commitdiff_plain;h=5df4223a444057e433e9e4f2e101ee7159f8c19d;hp=b9e03e0489a8616fc415e62128d05ad0159a20a2;p=net-next-2.6.git IB/qib: Clear eager buffer memory for each new process The eager buffers are not being cleared before being mmapped into a new user address space. This is a potential security risk and should be fixed. Note that the eager header queue is already being cleared. Signed-off-by: Ralph Campbell Signed-off-by: Roland Dreier --- diff --git a/drivers/infiniband/hw/qib/qib_init.c b/drivers/infiniband/hw/qib/qib_init.c index 25895991dc5..1d4db4b19d7 100644 --- a/drivers/infiniband/hw/qib/qib_init.c +++ b/drivers/infiniband/hw/qib/qib_init.c @@ -1472,6 +1472,9 @@ int qib_setup_eagerbufs(struct qib_ctxtdata *rcd) dma_addr_t pa = rcd->rcvegrbuf_phys[chunk]; unsigned i; + /* clear for security and sanity on each use */ + memset(rcd->rcvegrbuf[chunk], 0, size); + for (i = 0; e < egrcnt && i < egrperchunk; e++, i++) { dd->f_put_tid(dd, e + egroff + (u64 __iomem *)