]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
projects / thirdparty / kernel / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1d498df) | patch
SUNRPC: Fix integer overflow in decode_rc_list()
authorDan Carpenter <dan.carpenter@linaro.org>
Thu, 19 Sep 2024 08:50:33 +0000 (11:50 +0300)
committerAnna Schumaker <anna.schumaker@oracle.com>
Thu, 3 Oct 2024 20:19:13 +0000 (16:19 -0400)
commit6dbf1f341b6b35bcc20ff95b6b315e509f6c5369
treee68700cb37b3d3c05dfa1ea5eba6f37ef15d9b71tree
parent1d498df44e709d9708c0bf666012933bbc7ef1d6commit | diff
SUNRPC: Fix integer overflow in decode_rc_list()

The math in "rc_list->rcl_nrefcalls * 2 * sizeof(uint32_t)" could have an
integer overflow.  Add bounds checking on rc_list->rcl_nrefcalls to fix
that.

Fixes: 4aece6a19cf7 ("nfs41: cb_sequence xdr implementation")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Signed-off-by: Anna Schumaker <anna.schumaker@oracle.com>
fs/nfs/callback_xdr.c diff | blob | blame | history
A mirror of Linus' kernel repository