Anna Schumaker 6d1c0f3d28 sunrpc: Avoid a KASAN slab-out-of-bounds bug in xdr_set_page_base() ...

This seems to happen fairly easily during READ_PLUS testing on NFS v4.2.
I found that we could end up accessing xdr->buf->pages[pgnr] with a pgnr
greater than the number of pages in the array. So let's just return
early if we're setting base to a point at the end of the page data and
let xdr_set_tail_base() handle setting up the buffer pointers instead.

Signed-off-by: Anna Schumaker <Anna.Schumaker@Netapp.com>
Fixes: 8d86e373b0ef ("SUNRPC: Clean up helpers xdr_set_iov() and xdr_set_page_base()")
Signed-off-by: Trond Myklebust <trond.myklebust@hammerspace.com>

2021-06-13 19:36:49 -04:00

..

auth_gss

rpc: fix NULL dereference on kmalloc failure

2021-03-06 16:41:49 -05:00

xprtrdma

xprtrdma: Revert 586a0787ce35

2021-05-27 08:46:19 -04:00

addr.c

net: sunrpc: interpret the return value of kstrtou32 correctly

2021-01-10 13:32:51 -05:00

auth_null.c

SUNRPC: Add rpc_auth::au_ralign field

2019-02-14 11:48:36 -05:00

auth_unix.c

SUNRPC: Use the client user namespace when encoding creds

2019-04-26 16:24:32 -04:00

auth.c

sunrpc: add missing newline when printing parameter 'auth_hashtable_size' by sysfs

2020-06-11 13:33:48 -04:00

backchannel_rqst.c

The one new feature this time, from Anna Schumaker, is READ_PLUS, which

2020-10-22 09:44:27 -07:00

cache.c

sunrpc: clean-up cache downcall

2020-12-09 09:38:34 -05:00

clnt.c

SUNRPC in case of backlog, hand free slots directly to waiting task

2021-05-20 12:17:08 -04:00

debugfs.c

net: sunrpc: Fix 'snprintf' return value check in 'do_xprt_debugfs'

2020-12-02 14:05:54 -05:00

Kconfig

SUNRPC: remove RC4-HMAC-MD5 support from KerberosV

2020-09-11 14:39:15 +10:00

Makefile

SUNRPC: remove generic cred code.

2018-12-19 13:52:46 -05:00

netns.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

rpc_pipe.c

SUNRPC: Fix fall-through warnings for Clang

2021-02-01 13:32:32 -05:00

rpcb_clnt.c

sunrpc: honor rpc_task's timeout value in rpcb_create()

2021-04-05 09:04:21 -04:00

sched.c

SUNRPC: Set memalloc_nofs_save() for sync tasks

2021-03-08 15:32:16 -05:00

socklib.c

skb_copy_and_csum_bits(): don't bother with the last argument

2020-08-20 15:45:13 -04:00

socklib.h

SUNRPC: Refactor xs_sendpages()

2020-03-16 12:04:33 -04:00

stats.c

proc: convert everything to "struct proc_ops"

2020-02-04 03:05:26 +00:00

sunrpc_syms.c

sunrpc: check that domain table is empty at module unload.

2020-05-28 18:15:00 -04:00

sunrpc.h

Replace HTTP links with HTTPS ones: NFS, SUNRPC, and LOCKD clients

2020-09-21 10:21:10 -04:00

svc_xprt.c

SUNRPC: refresh rq_pages using a bulk page allocator

2021-04-30 11:20:43 -07:00

svc.c

SUNRPC: Fix null pointer dereference in svc_rqst_free()

2021-04-23 10:43:05 -04:00

svcauth_unix.c

sunrpc: Remove unused function ip_map_lookup

2021-04-06 11:24:31 -04:00

svcauth.c

sunrpc: check that domain table is empty at module unload.

2020-05-28 18:15:00 -04:00

svcsock.c

SUNRPC: fix ternary sign expansion bug in tracing

2021-04-22 11:02:28 -04:00

sysctl.c

net/sunrpc: fix useless comparison in proc_do_xprt()

2020-11-08 16:28:25 -05:00

timer.c

treewide: Add SPDX license identifier for missed files

2019-05-21 10:50:45 +02:00

xdr.c

sunrpc: Avoid a KASAN slab-out-of-bounds bug in xdr_set_page_base()

2021-06-13 19:36:49 -04:00

xprt.c

SUNRPC: More fixes for backlog congestion

2021-05-26 06:36:13 -04:00

xprtmultipath.c

SUNRPC: Optimise transport balancing code

2019-07-18 14:43:52 -04:00

xprtsock.c

SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected

2021-05-20 12:17:08 -04:00