Jason Gunthorpe 7122ff9606 RDMA/core: Do not read wild stack memory in uverbs_get_handler_fn() ... Sashiko points out the legacy write path in ib_uverbs_write() does allocate a struct uverbs_attr_bundle, but it doesn't wrap it in a bundle_priv so downcasting here isn't safe. Instead lift the method_elm out of the bundle_priv and use it for the debug function. The legacy write path will leave it set as NULL since the write method_elm uses a different type. Cc: stable@vger.kernel.org Fixes: 1de9287ece ("RDMA: Add ib_copy_validate_udata_in()") Signed-off-by: Jason Gunthorpe <jgg@nvidia.com> Signed-off-by: Leon Romanovsky <leonro@nvidia.com>		2026-05-19 19:32:48 -03:00
..
frmr_pools.h	RDMA/core: Add pinned handles to FRMR pools	2026-03-02 13:45:13 -05:00
ib.h	uaccess: remove CONFIG_SET_FS	2022-02-25 09:36:06 +01:00
ib_addr.h	RDMA/cma: Always set static rate to 0 for RoCE	2023-06-11 11:26:02 +03:00
ib_cache.h	IB/cache: avoid kernel-doc warnings	2026-02-24 05:38:45 -05:00
ib_cm.h	RDMA/cm: Correct typedef and bad line warnings	2025-11-12 04:39:12 -05:00
ib_hdrs.h	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
ib_mad.h	RDMA/sa_query: Support IB service records resolution	2025-08-13 06:15:56 -04:00
ib_marshall.h	RDMA/core: Remove unused ib_copy_path_rec_from_user	2024-12-24 05:00:42 -05:00
ib_pack.h	RDMA/core: Remove unused ib_ud_header_unpack	2024-12-24 05:00:42 -05:00
ib_pma.h	…
ib_sa.h	RDMA/sa_query: Support IB service records resolution	2025-08-13 06:15:56 -04:00
ib_smi.h	RDMA/mad: Delete duplicated init_query_mad functions	2022-01-05 15:18:36 -04:00
ib_sysfs.h	RDMA: Change ops->init_port to ops->port_groups	2021-06-16 20:58:31 -03:00
ib_ucaps.h	RDMA/uverbs: Introduce UCAP (User CAPabilities) API	2025-03-09 13:13:02 -04:00
ib_umem.h	RDMA/umem: Use consistent DMA attributes when unmapping entries	2026-03-30 13:47:45 -04:00
ib_umem_odp.h	RDMA/core: Convert UMEM ODP DMA mapping to caching IOVA and page linkage	2025-05-12 06:06:51 -04:00
ib_verbs.h	RDMA: Properly propagate the number of CQEs as unsigned int	2026-03-30 13:47:44 -04:00
iba.h	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
ibta_vol1_c12.h	…
iter.h	RDMA: Move DMA block iterator logic into dedicated files	2026-02-25 08:15:30 -05:00
iw_cm.h	RDMA/iwcm: fix some kernel-doc issues in iw_cm.h	2026-02-24 05:39:13 -05:00
iw_portmap.h	…
lag.h	…
mr_pool.h	…
opa_addr.h	…
opa_port_info.h	RDMA/OPA: Update OPA link speed list	2026-03-11 15:17:28 -04:00
opa_smi.h	…
rdma_cm.h	RDMA/core: Check id_priv->restricted_node_type in cma_listen_on_dev()	2026-02-25 07:50:10 -05:00
rdma_cm_ib.h	…
rdma_counter.h	RDMA/core: Pass port to counter bind/unbind operations	2025-03-18 06:18:46 -04:00
rdma_netlink.h	RDMA/nldev: Add dellink function pointer	2026-03-30 13:47:43 -04:00
rdma_vt.h	RDMA/rdmavt: Add driver mmap callback	2026-03-11 15:17:28 -04:00
rdmavt_cq.h	…
rdmavt_mr.h	…
rdmavt_qp.h	IB/rdmavt: rdmavt_qp.h: clean up kernel-doc comments	2025-11-06 02:23:23 -05:00
restrack.h	RDMA/restrack: fix kernel-doc indicator	2026-02-24 05:39:21 -05:00
rw.h	RDMA/core: add rdma_rw_max_sge() helper for SQ sizing	2026-01-28 05:54:53 -05:00
signature.h	…
tid_rdma_defs.h	…
uverbs_ioctl.h	RDMA/core: Do not read wild stack memory in uverbs_get_handler_fn()	2026-05-19 19:32:48 -03:00
uverbs_named_ioctl.h	RDMA/uverbs: Make UVERBS_OBJECT_METHODS to consider line number	2021-04-13 19:36:35 -03:00
uverbs_std_types.h	RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject()	2025-03-13 08:26:37 -04:00
uverbs_types.h	RDMA/uverbs: Add DMABUF object type and operations	2026-02-08 23:50:41 -05:00