[rds-devel] [Patch net] rds: limit the size allocated by rds_message_alloc()

[venkat venkatsubra]

On 3/3/2013 8:18 PM, Cong Wang wrote:
> From: Cong Wang <amwang at redhat.com>
>
> Dave Jones reported the following bug:
>
> "When fed mangled socket data, rds will trust what userspace gives it,
> and tries to allocate enormous amounts of memory larger than what
> kmalloc can satisfy."
>
> Reported-by: Dave Jones <davej at redhat.com>
> Cc: Dave Jones <davej at redhat.com>
> Cc: David S. Miller <davem at davemloft.net>
> Cc: Venkat Venkatsubra <venkat.x.venkatsubra at oracle.com>
> Signed-off-by: Cong Wang <amwang at redhat.com>
>
Acked-by: Venkat Venkatsubra <venkat.x.venkatsubra at oracle.com>