From: [email protected] Date: Tue, 2 Jan 2018 19:44:34 +0000 > From: Mohamed Ghannam <[email protected]> > > When args->nr_local is 0, nr_pages gets also 0 due some size > calculation via rds_rm_size(), which is later used to allocate > pages for DMA, this bug produces a heap Out-Of-Bound write access > to a specific memory region. > > Signed-off-by: Mohamed Ghannam <[email protected]>
Applied and queued up for -stable, thanks.
