[rds-devel] [Patch net] rds: limit the size allocated by rds_message_alloc()

[David Miller]

From: Cong Wang <amwang at redhat.com>
Date: Mon,  4 Mar 2013 10:18:11 +0800

> From: Cong Wang <amwang at redhat.com>
> 
> Dave Jones reported the following bug:
> 
> "When fed mangled socket data, rds will trust what userspace gives it,
> and tries to allocate enormous amounts of memory larger than what
> kmalloc can satisfy."
 ...
> Reported-by: Dave Jones <davej at redhat.com>
> Cc: Dave Jones <davej at redhat.com>
> Cc: David S. Miller <davem at davemloft.net>
> Cc: Venkat Venkatsubra <venkat.x.venkatsubra at oracle.com>
> Signed-off-by: Cong Wang <amwang at redhat.com>

Applied and queued up for -stable, thanks.