Chuck Lever d0725dc7d2 SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment() ...

commit 89a3c9f5b9 upstream.

@subbuf is an output parameter of xdr_buf_subsegment(). A survey of
call sites shows that @subbuf is always uninitialized before
xdr_buf_segment() is invoked by callers.

There are some execution paths through xdr_buf_subsegment() that do
not set all of the fields in @subbuf, leaving some pointer fields
containing garbage addresses. Subsequent processing of that buffer
then results in a page fault.

Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Anna Schumaker <Anna.Schumaker@Netapp.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-05-16 08:22:05 +09:00

..

auth_gss

sunrpc: clean up properly in gss_mech_unregister()

2023-05-15 17:34:44 +09:00

xprtrdma

xprtrdma: Fix backchannel allocation of extra rpcrdma_reps

2023-05-15 17:26:27 +09:00

addr.c

net: sunrpc: Fix off-by-one issues in 'rpc_ntop6'

2023-05-16 08:19:47 +09:00

auth_generic.c

SUNRPC: Fix a bogus get/put in generic_key_to_expire()

2023-05-15 09:57:56 +09:00

auth_null.c

sunrpc: move NO_CRKEY_TIMEOUT to the auth->au_flags

2016-07-19 16:23:24 -04:00

auth_unix.c

Merge tag 'nfs-for-4.9-1' of git://git.linux-nfs.org/projects/anna/linux-nfs

2016-10-13 21:28:20 -07:00

auth.c

sunrpc: replace generic auth_cred hash with auth-specific function

2016-09-30 15:47:47 -04:00

backchannel_rqst.c

SUNRPC: Refactor rpc_xdr_buf_init()

2016-09-19 13:08:37 -04:00

cache.c

sunrpc: fix crash when cache_head become valid before update

2023-05-15 16:17:25 +09:00

clnt.c

net :sunrpc :clnt :Fix xps refcount imbalance on the error path

2023-05-15 13:58:22 +09:00

debugfs.c

SUNRPC: Address kbuild warning in net/sunrpc/debugfs.c

2015-06-11 14:01:06 -04:00

Kconfig

rpcrdma: Merge svcrdma and xprtrdma modules into one

2015-06-04 16:56:02 -04:00

Makefile

SUNRPC: Add a structure to track multiple transports

2016-02-05 18:48:54 -05:00

netns.h

Merge branch 'for-3.14' of git://linux-nfs.org/~bfields/linux

2014-01-30 10:18:43 -08:00

rpc_pipe.c

sunrpc: fixed rollback in rpc_gssd_dummy_populate()

2023-05-16 08:22:04 +09:00

rpcb_clnt.c

sunrpc: handle ENOMEM in rpcb_getport_async

2023-05-15 11:01:37 +09:00

sched.c

SUNRPC: Fix priority queue fairness

2023-05-15 15:11:19 +09:00

socklib.c

sunrpc: do not pull udp headers on receive

2016-04-11 15:31:33 -04:00

stats.c

sunrpc: add rpc_count_iostats_idx

2015-02-03 11:06:38 -08:00

sunrpc_syms.c

SUNRPC: cleanup ida information when removing sunrpc module

2017-02-01 08:33:09 +01:00

sunrpc.h

SUNRPC: track whether a request is coming from a loop-back interface.

2014-05-22 15:59:18 -04:00

svc_xprt.c

sunrpc: use-after-free in svc_process_common()

2023-05-15 11:01:05 +09:00

svc.c

sunrpc: use-after-free in svc_process_common()

2023-05-15 11:01:05 +09:00

svcauth_unix.c

kernel: make groups_sort calling a responsibility group_info allocators

2018-01-10 09:29:52 +01:00

svcauth.c

svcrpc: move some initialization to common code

2015-11-24 10:39:16 -07:00

svcsock.c

sunrpc: use-after-free in svc_process_common()

2023-05-15 11:01:05 +09:00

sysctl.c

Sunrpc: Supports hexadecimal number for sysctl files of sunrpc debug

2015-11-03 15:56:49 -05:00

timer.c

net: cleanup unsigned to unsigned int

2012-04-15 12:44:40 -04:00

xdr.c

SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment()

2023-05-16 08:22:05 +09:00

xprt.c

SUNRPC: Fix a potential race in xprt_connect()

2023-05-15 10:36:58 +09:00

xprtmultipath.c

SUNRPC search xprt switch for sockaddr

2016-09-19 13:08:36 -04:00

xprtsock.c

sunrpc: safely reallow resvport min/max inversion

2023-05-15 15:17:50 +09:00