mbox series

[0/2] NFSD: prevent integer overflows

Message ID 332d1149-988e-4ece-8aef-1e3fb8bf8af4@moroto.mountain (mailing list archive)
Headers show
Series NFSD: prevent integer overflows | expand

Message

Dan Carpenter May 9, 2024, 10:47 a.m. UTC
There is a potential for integer overflows in svcxdr_dupstr()
and svcxdr_tmpalloc() and XDR_QUADLEN().  I believe the fixing the
overflow in XDR_QUADLEN() would fix the bug, but it's safer to be
more thourough.

Dan Carpenter (2):
  SUNRPC: prevent integer overflow in XDR_QUADLEN()
  NFSD: harden svcxdr_dupstr() and svcxdr_tmpalloc() against integer
    overflows

 fs/nfsd/nfs4xdr.c          | 12 ++++++------
 include/linux/sunrpc/xdr.h |  3 ++-
 2 files changed, 8 insertions(+), 7 deletions(-)