Re: [PATCH] SUNRPC: Fix loop termination condition in gss_free_in_token_pages()

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Jun 03, 2024 at 08:33:51AM -0400, Benjamin Coddington wrote:
> On 2 Jun 2024, at 18:15, cel@xxxxxxxxxx wrote:
> 
> > From: Chuck Lever <chuck.lever@xxxxxxxxxx>
> >
> > The in_token->pages[] array is not NULL terminated. This results in
> > the following KASAN splat:
> >
> >   KASAN: maybe wild-memory-access in range [0x04a2013400000008-0x04a201340000000f]
> >
> > Fixes: bafa6b4d95d9 ("SUNRPC: Fix gss_free_in_token_pages()")
> > Signed-off-by: Chuck Lever <chuck.lever@xxxxxxxxxx>
> 
> Nice.
> 
> Reviewed-by: Benjamin Coddington <bcodding@xxxxxxxxxx>
> 
> Ben
> 

Thank you, Ben. Applied to nfsd-fixes (for 6.10-rc).

-- 
Chuck Lever




[Index of Archives]     [Linux Filesystem Development]     [Linux USB Development]     [Linux Media Development]     [Video for Linux]     [Linux NILFS]     [Linux Audio Users]     [Yosemite Info]     [Linux SCSI]

  Powered by Linux