]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
authorNeilBrown <neil@brown.name>
Fri, 28 Mar 2025 00:05:59 +0000 (11:05 +1100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 27 Jun 2025 10:04:12 +0000 (11:04 +0100)
commit 1244f0b2c3cecd3f349a877006e67c9492b41807 upstream.

If the request being processed is not a v4 compound request, then
examining the cstate can have undefined results.

This patch adds a check that the rpc procedure being executed
(rq_procinfo) is the NFSPROC4_COMPOUND procedure.

Reported-by: Olga Kornievskaia <okorniev@redhat.com>
Cc: stable@vger.kernel.org
Reviewed-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: NeilBrown <neil@brown.name>
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/nfsd/nfs4proc.c

index 8cf0e4e62bc84451d4cf8263a794a3a5b867b4c4..1da06a15b13f5e07a18c92bb122526f34af895f4 100644 (file)
@@ -3537,7 +3537,8 @@ bool nfsd4_spo_must_allow(struct svc_rqst *rqstp)
        struct nfs4_op_map *allow = &cstate->clp->cl_spo_must_allow;
        u32 opiter;
 
-       if (!cstate->minorversion)
+       if (rqstp->rq_procinfo != &nfsd_version4.vs_proc[NFSPROC4_COMPOUND] ||
+           cstate->minorversion == 0)
                return false;
 
        if (cstate->spo_must_allowed)