• Dan Carpenter's avatar
    RDMA/bnxt_re: fix a size calculation · 97099cc6
    Dan Carpenter authored
    This is from static analysis not from testing.  Depending on the value
    of rcfw->cmdq_depth, then this might not cause an issue at runtime.
    
    The BITS_TO_LONGS() macro tells us how many longs it take to hold a
    bitmap.  In other words, it divides by the number if bits per long and
    rounds up.  Then we want to take that number and multiple by
    sizeof(long) to get the number of bytes to allocate.
    
    The code here does the multiplication first so the rounding up is done
    in the wrong place.  So imagine we want to allocate 1 bit, then
    "(1 * 8) / 64 = 1" when we round up.  But it should be
    "(1 / 64) * 8 = 8".  In other words, because of the rounding difference
    we might allocate up to "sizeof(long) - 1" bytes fewer than intended.
    
    Fixes: 1ac5a404 ("RDMA/bnxt_re: Add bnxt_re RoCE driver")
    Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
    Acked-By: default avatarDevesh Sharma <devesh.sharma@broadcom.com>
    Signed-off-by: default avatarJason Gunthorpe <jgg@mellanox.com>
    97099cc6
qplib_rcfw.c 22.3 KB