RDMA/irdma: Fix potential NULL-ptr-dereference
authorNikita Zhandarovich <n.zhandarovich@fintech.ru>
Thu, 26 Jan 2023 18:52:30 +0000 (10:52 -0800)
committerLeon Romanovsky <leon@kernel.org>
Sun, 29 Jan 2023 12:55:54 +0000 (14:55 +0200)
in_dev_get() can return NULL which will cause a failure once idev is
dereferenced in in_dev_for_each_ifa_rtnl(). This patch adds a
check for NULL value in idev beforehand.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: 146b9756f14c ("RDMA/irdma: Add connection manager")
Signed-off-by: Nikita Zhandarovich <n.zhandarovich@fintech.ru>
Link: https://lore.kernel.org/r/20230126185230.62464-1-n.zhandarovich@fintech.ru
Reviewed-by: Sindhu Devale <sindhu.devale@intel.com>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
drivers/infiniband/hw/irdma/cm.c

index 7b086fe63a245964c7ce505724899aac21600148..195aa9ea18b6ca74c24dc7c45a24d693cedece9b 100644 (file)
@@ -1722,6 +1722,9 @@ static int irdma_add_mqh_4(struct irdma_device *iwdev,
                        continue;
 
                idev = in_dev_get(ip_dev);
+               if (!idev)
+                       continue;
+
                in_dev_for_each_ifa_rtnl(ifa, idev) {
                        ibdev_dbg(&iwdev->ibdev,
                                  "CM: Allocating child CM Listener forIP=%pI4, vlan_id=%d, MAC=%pM\n",