From: Ralph Campbell Date: Mon, 18 Jun 2007 21:24:44 +0000 (-0700) Subject: IB/ipath: Fix possible data corruption if multiple SGEs used for receive X-Git-Tag: v2.6.23-rc1~1085^2~53 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=30d149ab58cc3ed8e4bc9c4dc45bebbed0e84b6e;p=pandora-kernel.git IB/ipath: Fix possible data corruption if multiple SGEs used for receive The code to copy data from the receive queue buffers to the IB SGEs doesn't check the SGE length, only the memory region/page length when copying data. This could overwrite parts of the user's memory that were not intended to be written. It can only happen if multiple SGEs are used to describe a receive buffer which almost never happens in practice. Signed-off-by: Ralph Campbell Signed-off-by: Roland Dreier --- Reading git-diff-tree failed