Chuck Lever 0f5162480b
NFSD: Watch for rq_pages bounds checking errors in nfsd_splice_actor() ...
There have been several bugs over the years where the NFSD splice
actor has attempted to write outside the rq_pages array.
This is a "should never happen" condition, but if for some reason
the pipe splice actor should attempt to walk past the end of
rq_pages, it needs to terminate the READ operation to prevent
corruption of the pointer addresses in the fields just beyond the
array.
A server crash is thus prevented. Since the code is not behaving,
the READ operation returns -EIO to the client. None of the READ
payload data can be trusted if the splice actor isn't operating as
expected.
Suggested-by: Jeff Layton <jlayton@kernel.org >
Signed-off-by: Chuck Lever <chuck.lever@oracle.com >
Reviewed-by: Jeff Layton <jlayton@kernel.org >
2023-04-26 09:05:01 -04:00
2022-07-02 18:52:21 +09:00
2022-08-02 18:21:29 +01:00
2020-11-30 12:54:01 +00:00
2021-02-22 06:37:41 -07:00
2022-02-11 10:00:16 -07:00
2023-02-06 08:48:25 +00:00
2023-02-13 17:50:34 +01:00
2022-12-07 10:56:29 +08:00
2021-12-01 07:23:35 -10:00
2022-12-07 13:54:09 -08:00
2023-01-18 17:12:41 -08:00
2022-05-13 07:20:18 -07:00
2022-01-15 16:30:33 +02:00
2020-10-26 10:52:37 +09:00
2023-02-15 19:15:44 -08:00
2022-11-21 09:45:49 -06:00
2021-06-30 09:19:14 -04:00
2023-02-15 08:11:26 +08:00
2022-01-20 08:52:55 +02:00
2022-12-08 21:49:24 -05:00
2023-03-10 08:57:49 -08:00
2023-03-29 08:22:52 +01:00
2023-03-29 08:22:52 +01:00
2022-01-04 13:15:33 -05:00
2022-12-07 11:49:18 -08:00
2022-02-21 19:38:54 +10:30
2022-02-21 19:38:54 +10:30
2023-01-26 11:52:11 +02:00
2023-04-19 18:48:48 -07:00
2022-12-11 18:12:09 -08:00
2022-03-20 00:11:05 +01:00
2022-11-10 10:57:15 +02:00
2022-05-12 15:35:29 +02:00
2022-09-21 10:30:42 -06:00
2022-12-01 07:44:12 -07:00
2023-01-13 16:39:18 +01:00
2022-07-19 11:20:25 -04:00
2022-12-08 21:49:12 -05:00
2022-11-30 15:58:40 -08:00
2022-08-10 15:08:26 -04:00
2021-10-15 21:02:57 -06:00
2022-06-17 16:30:03 +09:00
2022-04-05 10:24:36 +02:00
2022-09-26 19:46:13 -07:00
2022-02-09 12:00:11 +00:00
2022-03-24 19:06:45 -07:00
2021-11-06 13:30:36 -07:00
2023-03-23 17:18:36 -07:00
2023-02-02 22:33:13 -08:00
2022-04-23 11:51:05 +01:00
2022-07-15 13:35:59 -04:00
2022-06-27 11:57:06 +01:00
2022-03-18 09:29:05 +00:00
2021-02-04 18:05:59 -08:00
2022-07-14 12:14:33 -06:00
2021-06-28 14:12:27 -04:00
2021-06-29 10:53:52 -07:00
2021-09-08 11:50:24 -07:00
2021-10-18 07:49:40 -04:00
2022-05-25 10:47:48 -07:00
2022-08-03 17:50:58 +02:00
2022-12-06 12:46:23 +01:00
2022-06-27 11:57:06 +01:00
2022-07-19 11:20:25 -04:00
2023-04-04 18:58:43 -07:00
2023-03-22 14:05:24 -07:00
2023-02-20 09:20:25 -05:00
2022-12-10 11:01:12 -05:00
2022-12-27 12:52:15 +01:00
2022-07-30 14:01:30 -04:00
2022-11-21 22:02:10 +01:00
2023-02-20 08:33:25 +01:00
2022-05-12 00:37:11 +02:00
2023-01-20 11:40:57 +00:00
2022-06-21 21:43:23 -04:00
2023-02-20 08:28:49 +00:00
2023-03-17 08:56:37 +00:00
2022-09-19 15:44:06 +01:00
2022-09-19 15:44:08 +01:00
2021-05-26 21:22:13 +01:00
2022-07-24 16:16:44 +02:00
2023-04-26 09:05:01 -04:00
2022-04-18 07:21:11 +02:00
2020-10-02 18:36:19 -04:00
2023-03-17 08:56:37 +00:00
2022-05-06 09:57:38 +02:00
2022-07-28 17:29:42 +02:00
2022-03-24 19:06:45 -07:00
2022-04-14 16:14:49 +02:00
2021-05-10 22:28:20 -04:00
2022-11-08 17:37:17 -08:00
2022-05-19 14:08:55 -07:00
2021-06-11 13:32:47 -07:00
2022-10-12 09:47:02 +02:00
2022-06-07 07:09:47 -10:00
2022-03-22 15:57:01 -07:00
2021-05-26 09:46:16 +02:00
2021-03-06 12:59:10 +01:00
0f5162480b