IB/mlx5: Fix check of number of entries in create CQ

Verify that the value is non negative before rounding up to power of 2.

Signed-off-by: Eli Cohen <eli@mellanox.com>
Signed-off-by: Roland Dreier <roland@purestorage.com>

1 files changed, 4 insertions, 1 deletions

diff --git a/drivers/infiniband/hw/mlx5/cq.c b/drivers/infiniband/hw/mlx5/cq.c
index 344ab03948a3..e7c64c57d699 100644
--- a/drivers/infiniband/hw/mlx5/cq.c
+++ b/drivers/infiniband/hw/mlx5/cq.c
@@ -653,8 +653,11 @@ struct ib_cq *mlx5_ib_create_cq(struct ib_device *ibdev, int entries,
         int eqn;
         int err;
 
+        if (entries < 0)
+                return ERR_PTR(-EINVAL);
+
         entries = roundup_pow_of_two(entries + 1);
-        if (entries < 1 || entries > dev->mdev.caps.max_cqes)
+        if (entries > dev->mdev.caps.max_cqes)
                 return ERR_PTR(-EINVAL);
 
         cq = kzalloc(sizeof(*cq), GFP_KERNEL);