svcrdma: underflow issue in decode_write_list()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 12 Jul 2013 06:39:03 +0000 (09:39 +0300)
committerJ. Bruce Fields <bfields@redhat.com>
Mon, 15 Jul 2013 15:46:23 +0000 (11:46 -0400)
My static checker marks everything from ntohl() as untrusted and it
complains we could have an underflow problem doing:

return (u32 *)&ary->wc_array[nchunks];

Also on 32 bit systems the upper bound check could overflow.

Cc: stable@vger.kernel.org
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: J. Bruce Fields <bfields@redhat.com>

No differences found