Re: [PATCH] net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS

Hello:

This patch was applied to netdev/net.git (refs/heads/master):

On Tue,  2 Feb 2021 02:32:33 +0600 you wrote:

syzbot found WARNING in rds_rdma_extra_size [1] when RDS_CMSG_RDMA_ARGS
control message is passed with user-controlled
0x40001 bytes of args->nr_local, causing order >= MAX_ORDER condition.

The exact value 0x40001 can be checked with UIO_MAXIOV which is 0x400.
So for kcalloc() 0x400 iovecs with sizeof(struct rds_iovec) = 0x10
is the closest limit, with 0x10 leftover.

[...]

Here is the summary with links:
  - net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
    https://git.kernel.org/netdev/net/c/a11148e6fcce

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html