From: simo.ghan...@gmail.com Date: Tue, 2 Jan 2018 19:44:34 +0000 > From: Mohamed Ghannam <simo.ghan...@gmail.com> > > When args->nr_local is 0, nr_pages gets also 0 due some size > calculation via rds_rm_size(), which is later used to allocate > pages for DMA, this bug produces a heap Out-Of-Bound write access > to a specific memory region. > > Signed-off-by: Mohamed Ghannam <simo.ghan...@gmail.com>
Applied and queued up for -stable, thanks.