linux-kernel - [GIT PULL] nfsd fixes for 4.11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:   Thu, 27 Apr 2017 16:26:28 -0400
From:   bfields@...ldses.org (J. Bruce Fields)
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-nfs@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: [GIT PULL] nfsd fixes for 4.11

Please pull knfsd bugfixes for 4.11 from

  git://linux-nfs.org/~bfields/linux.git tags/nfsd-4.11-3

Thanks to Ari Kauppi and Tuomas Haanpää at Synopsis for spotting bugs in
our NFSv2/v3 xdr code that could crash the server or expose memory.

--b.

J. Bruce Fields (3):
      nfsd: check for oversized NFSv2/v3 arguments
      nfsd4: minor NFSv2/v3 write decoding cleanup
      nfsd: stricter decoding of write-like NFSv2/v3 ops

 fs/nfsd/nfs3xdr.c | 13 +++++++++----
 fs/nfsd/nfssvc.c  | 36 ++++++++++++++++++++++++++++++++++++
 fs/nfsd/nfsxdr.c  | 10 ++++++----
 3 files changed, 51 insertions(+), 8 deletions(-)