android_kernel_motorola_sm6375/net/sunrpc
Repository files (latest commit first)
Filename Latest commit message Latest commit date
J. Bruce Fields c899b8391a rpc: fix NULL dereference on kmalloc failure
[ Upstream commit 0ddc942394013f08992fc379ca04cffacbbe3dae ]

I think this is unlikely but possible:

svc_authenticate sets rq_authop and calls svcauth_gss_accept.  The
kmalloc(sizeof(*svcdata), GFP_KERNEL) fails, leaving rq_auth_data NULL,
and returning SVC_DENIED.

This causes svc_process_common to go to err_bad_auth, and eventually
call svc_authorise.  That calls ->release == svcauth_gss_release, which
tries to dereference rq_auth_data.

Signed-off-by: J. Bruce Fields <bfields@redhat.com>
Link: https://lore.kernel.org/linux-nfs/3F1B347F-B809-478F-A1E9-0BE98E22B0F0@oracle.com/T/#t
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-04-07 14:47:38 +02:00
..
auth_gss rpc: fix NULL dereference on kmalloc failure 2021-04-07 14:47:38 +02:00
xprtrdma svcrdma: disable timeouts on rdma backchannel 2021-03-24 11:26:38 +01:00
addr.c net: sunrpc: interpret the return value of kstrtou32 correctly 2021-01-19 18:26:18 +01:00
auth.c
auth_null.c
auth_unix.c
backchannel_rqst.c
cache.c
clnt.c
debugfs.c
Kconfig
Makefile
netns.h
rpc_pipe.c
rpcb_clnt.c
sched.c SUNRPC: Set memalloc_nofs_save() for sync tasks 2021-03-17 17:03:56 +01:00
socklib.c
stats.c
sunrpc.h
sunrpc_syms.c
svc.c sunrpc: fix refcount leak for rpc auth modules 2021-03-24 11:26:39 +01:00
svc_xprt.c NFSD: Repair misuse of sv_lock in 5.10.16-rt30. 2021-03-24 11:26:38 +01:00
svcauth.c
svcauth_unix.c
svcsock.c
sysctl.c
timer.c
xdr.c
xprt.c
xprtmultipath.c
xprtsock.c sunrpc: fix xs_read_xdr_buf for partial pages receive 2020-12-30 11:51:26 +01:00