Commit 6ff57a2e authored by Qianqiang Liu's avatar Qianqiang Liu Committed by Leon Romanovsky
Browse files

RDMA/nldev: Fix NULL pointer dereferences issue in rdma_nl_notify_event 

nlmsg_put() may return a NULL pointer assigned to nlh, which will later
be dereferenced in nlmsg_end().

Fixes: 9cbed5aa ("RDMA/nldev: Add support for RDMA monitoring")
Link: https://patch.msgid.link/r/Zva71Yf3F94uxi5A@iZbp1asjb3cy8ks0srf007Z


Signed-off-by: default avatarQianqiang Liu <qianqiang.liu@163.com>
Signed-off-by: default avatarJason Gunthorpe <jgg@nvidia.com>
Signed-off-by: default avatarLeon Romanovsky <leon@kernel.org>
parent 8e65abac

drivers/infiniband/core/nldev.c

+2 −0
Original line number Diff line number Diff line
@@ -2816,6 +2816,8 @@ int rdma_nl_notify_event(struct ib_device *device, u32 port_num, 
	nlh = nlmsg_put(skb, 0, 0,

			RDMA_NL_GET_TYPE(RDMA_NL_NLDEV, RDMA_NLDEV_CMD_MONITOR),

			0, 0);

	if (!nlh)

		goto err_free;



	switch (type) {

	case RDMA_REGISTER_EVENT: