]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
libceph: replace BUG_ON with bounds check for map->max_osd
authorziming zhang <ezrakiez@gmail.com>
Mon, 17 Nov 2025 10:07:41 +0000 (18:07 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 6 Dec 2025 21:25:02 +0000 (06:25 +0900)
commite67e3be690f5f7e3b031cf29e8d91e6d02a8e30d
treecb56cb644ae5c778cdd9f867ef217b16745bbf3d
parent5ef575834ca99f719d7573cdece9df2fe2b72424
libceph: replace BUG_ON with bounds check for map->max_osd

commit ec3797f043756a94ea2d0f106022e14ac4946c02 upstream.

OSD indexes come from untrusted network packets. Boundary checks are
added to validate these against map->max_osd.

[ idryomov: drop BUG_ON in ceph_get_primary_affinity(), minor cosmetic
  edits ]

Cc: stable@vger.kernel.org
Signed-off-by: ziming zhang <ezrakiez@gmail.com>
Reviewed-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/ceph/osdmap.c