ziming zhang e67e3be690 libceph: replace BUG_ON with bounds check for map->max_osd ...

commit ec3797f043 upstream.

OSD indexes come from untrusted network packets. Boundary checks are
added to validate these against map->max_osd.

[ idryomov: drop BUG_ON in ceph_get_primary_affinity(), minor cosmetic
  edits ]

Cc: stable@vger.kernel.org
Signed-off-by: ziming zhang <ezrakiez@gmail.com>
Reviewed-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-12-07 06:25:02 +09:00

..

crush

…

armor.c

…

auth_none.c

…

auth_none.h

…

auth_x_protocol.h

…

auth_x.c

libceph: prevent potential out-of-bounds writes in handle_auth_session_key()

2025-12-07 06:25:02 +09:00

auth_x.h

…

auth.c

…

buffer.c

…

ceph_common.c

libceph: fix potential use-after-free in have_mon_and_osd_map()

2025-12-07 06:25:02 +09:00

ceph_hash.c

…

ceph_strings.c

…

cls_lock_client.c

…

crypto.c

…

crypto.h

…

debugfs.c

libceph: fix potential use-after-free in have_mon_and_osd_map()

2025-12-07 06:25:02 +09:00

decode.c

…

Kconfig

…

Makefile

…

messenger_v1.c

…

messenger_v2.c

ceph: fix crash in process_v2_sparse_read() for encrypted directories

2025-12-07 06:24:59 +09:00

messenger.c

…

mon_client.c

…

msgpool.c

…

osd_client.c

…

osdmap.c

libceph: replace BUG_ON with bounds check for map->max_osd

2025-12-07 06:25:02 +09:00

pagelist.c

…

pagevec.c

…

snapshot.c

…

string_table.c

…

striper.c

…