lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20170427202628.GA8989@fieldses.org>
Date:   Thu, 27 Apr 2017 16:26:28 -0400
From:   bfields@...ldses.org (J. Bruce Fields)
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-nfs@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: [GIT PULL] nfsd fixes for 4.11

Please pull knfsd bugfixes for 4.11 from

  git://linux-nfs.org/~bfields/linux.git tags/nfsd-4.11-3

Thanks to Ari Kauppi and Tuomas Haanpää at Synopsis for spotting bugs in
our NFSv2/v3 xdr code that could crash the server or expose memory.

--b.

J. Bruce Fields (3):
      nfsd: check for oversized NFSv2/v3 arguments
      nfsd4: minor NFSv2/v3 write decoding cleanup
      nfsd: stricter decoding of write-like NFSv2/v3 ops

 fs/nfsd/nfs3xdr.c | 13 +++++++++----
 fs/nfsd/nfssvc.c  | 36 ++++++++++++++++++++++++++++++++++++
 fs/nfsd/nfsxdr.c  | 10 ++++++----
 3 files changed, 51 insertions(+), 8 deletions(-)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ