rds: rds_msg_zcopy should return error of null rm->data.op_mmp_znotifier
authorSowmini Varadhan <sowmini.varadhan@oracle.com>
Thu, 22 Feb 2018 21:40:27 +0000 (13:40 -0800)
committerDavid S. Miller <davem@davemloft.net>
Fri, 23 Feb 2018 17:30:52 +0000 (12:30 -0500)
commit79a5b9727a1cceacd49921b78425ebda91836bd6
treee03e5079d90724f8191618d5983afdc09868d356
parent9dbe7896d95af114fcb5554b53cf796ca9293b13
rds: rds_msg_zcopy should return error of null rm->data.op_mmp_znotifier

if either or both of MSG_ZEROCOPY and SOCK_ZEROCOPY have not been
specified, the rm->data.op_mmp_znotifier allocation will be skipped.
In this case, it is invalid ot pass down a cmsghdr with
RDS_CMSG_ZCOPY_COOKIE, so return EINVAL from rds_msg_zcopy for this
case.

Reported-by: syzbot+f893ae7bb2f6456dfbc3@syzkaller.appspotmail.com
Fixes: 0cebaccef3ac ("rds: zerocopy Tx support.")
Signed-off-by: Sowmini Varadhan <sowmini.varadhan@oracle.com>
Acked-by: Willem de Bruijn <willemb@google.com>
Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/rds/send.c