Ezrak1e 67288113c5 dlm: validate length in dlm_search_rsb_tree ...

[ Upstream commit 080e5563f8 ]

The len parameter in dlm_dump_rsb_name() is not validated and comes
from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can
cause out-of-bounds write in dlm_search_rsb_tree().

Add length validation to prevent potential buffer overflow.

Signed-off-by: Ezrak1e <ezrakiez@gmail.com>
Signed-off-by: Alexander Aring <aahringo@redhat.com>
Signed-off-by: David Teigland <teigland@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-03-04 07:20:52 -05:00

..

ast.c

…

ast.h

…

config.c

…

config.h

…

debug_fs.c

…

dir.c

…

dir.h

…

dlm_internal.h

…

Kconfig

…

lock.c

dlm: validate length in dlm_search_rsb_tree

2026-03-04 07:20:52 -05:00

lock.h

…

lockspace.c

dlm: check for defined force value in dlm_lockspace_release

2025-10-29 14:08:52 +01:00

lockspace.h

…

lowcomms.c

dlm: make tcp still work in multi-link env

2025-05-29 11:02:14 +02:00

lowcomms.h

…

lvb_table.h

…

main.c

…

Makefile

…

member.c

…

member.h

…

memory.c

…

memory.h

…

midcomms.c

…

midcomms.h

…

plock.c

…

rcom.c

…

rcom.h

…

recover.c

…

recover.h

…

recoverd.c

…

recoverd.h

…

requestqueue.c

…

requestqueue.h

…

user.c

…

user.h

…

util.c

…

util.h

…