Joshua Rogers 7ba826aae1 svcrdma: bound check rq_pages index in inline path ...

[ Upstream commit d1bea0ce35b6095544ee82bb54156fc62c067e58 ]

svc_rdma_copy_inline_range indexed rqstp->rq_pages[rc_curpage] without
verifying rc_curpage stays within the allocated page array. Add guards
before the first use and after advancing to a new page.

Fixes: d7cc739726 ("svcrdma: support multiple Read chunks per RPC")
Cc: stable@vger.kernel.org
Signed-off-by: Joshua Rogers <linux@joshua.hu>
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
[ adapted rc_curpage and rq_maxpages fields to ri_pageno and RPCSVC_MAXPAGES constant ]
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-01-11 15:22:23 +01:00

..

auth_gss

SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf

2026-01-11 15:22:02 +01:00

xprtrdma

svcrdma: bound check rq_pages index in inline path

2026-01-11 15:22:23 +01:00

.kunitconfig

SUNRPC: Remove RPCSEC_GSS_KRB5_ENCTYPES_DES

2023-08-29 17:45:22 -04:00

addr.c

net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()

2024-03-26 18:20:01 -04:00

auth_null.c

…

auth_tls.c

SUNRPC: Fail quickly when server does not recognize TLS

2023-09-27 15:16:40 -04:00

auth_unix.c

…

auth.c

cred: get rid of CONFIG_DEBUG_CREDENTIALS

2023-12-20 17:01:51 +01:00

backchannel_rqst.c

Merge tag 'nfs-for-5.20-1' of git://git.linux-nfs.org/projects/trondmy/linux-nfs

2022-08-10 14:04:32 -07:00

cache.c

sunrpc: suppress warnings for unused procfs functions

2025-03-07 16:45:37 +01:00

clnt.c

sunrpc: don't immediately retransmit on seqno miss

2025-07-06 11:00:05 +02:00

debugfs.c

…

fail.h

…

Kconfig

SUNRPC: Remove CONFIG_RPCSEC_GSS_KRB5_CRYPTOSYSTEM

2023-08-29 17:45:22 -04:00

Makefile

SUNRPC: Add RPC client support for the RPC_AUTH_TLS auth flavor

2023-06-19 12:18:36 -04:00

netns.h

SUNRPC: Fix occasional warning when destroying gss_krb5_enctypes

2023-02-20 09:20:57 -05:00

rpc_pipe.c

sunrpc: convert to ctime accessor functions

2023-07-24 10:30:07 +02:00

rpcb_clnt.c

SUNRPC: rpcbind should never reset the port to the value '0'

2025-06-04 14:41:55 +02:00

sched.c

Revert "SUNRPC: Don't allow waiting for exiting tasks"

2025-09-19 16:32:03 +02:00

socklib.c

use less confusing names for iov_iter direction initializers

2022-11-25 13:01:55 -05:00

socklib.h

…

stats.c

sunrpc: use the struct net as the svc proc private

2024-08-19 06:04:23 +02:00

sunrpc_syms.c

…

sunrpc.h

…

svc_xprt.c

SUNRPC: Revert 5f7fc5d69f

2024-01-01 12:42:26 +00:00

svc.c

sunrpc: handle SVC_GARBAGE during svc auth processing as auth error

2025-06-27 11:09:00 +01:00

svcauth_unix.c

SUNRPC: Add enum svc_auth_status

2023-08-29 17:45:22 -04:00

svcauth.c

SUNRPC: Add enum svc_auth_status

2023-08-29 17:45:22 -04:00

svcsock.c

net: better track kernel sockets lifetime

2025-08-28 16:28:39 +02:00

sysctl.c

sunrpc: simplify one-level sysctl registration for debug_table

2023-04-11 12:45:19 -04:00

sysfs.c

SUNRPC: Add a TCP-with-TLS RPC transport class

2023-06-19 12:28:10 -04:00

sysfs.h

NFS: Add sysfs links to sunrpc clients for nfs_clients

2023-06-19 15:04:13 -04:00

timer.c

…

xdr.c

Merge tag 'nfs-for-6.6-1' of git://git.linux-nfs.org/projects/anna/linux-nfs

2023-08-31 15:36:41 -07:00

xprt.c

timers: Get rid of del_singleshot_timer_sync()

2022-11-24 15:09:10 +01:00

xprtmultipath.c

SUNRPC: Fix a suspicious RCU usage warning

2024-02-05 20:14:17 +00:00

xprtsock.c

SUNRPC: call xs_sock_process_cmsg for all cmsg

2025-09-19 16:32:01 +02:00