Chuck Lever cedaf73c8b SUNRPC: Fix svcxdr_init_encode's buflen calculation ...

[ Upstream commit 1242a87da0 ]

Commit 2825a7f907 ("nfsd4: allow encoding across page boundaries")
added an explicit computation of the remaining length in the rq_res
XDR buffer.

The computation appears to suffer from an "off-by-one" bug. Because
buflen is too large by one page, XDR encoding can run off the end of
the send buffer by eventually trying to use the struct page address
in rq_page_end, which always contains NULL.

Fixes: bddfdbcddb ("NFSD: Extract the svcxdr_init_encode() helper")
Reviewed-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2022-10-26 12:34:38 +02:00

..

addr.h

…

auth_gss.h

…

auth.h

…

bc_xprt.h

…

cache.h

…

clnt.h

…

debug.h

…

gss_api.h

…

gss_asn1.h

…

gss_err.h

…

gss_krb5_enctypes.h

…

gss_krb5.h

…

metrics.h

…

msg_prot.h

…

rpc_pipe_fs.h

…

rpc_rdma_cid.h

…

rpc_rdma.h

…

sched.h

…

stats.h

…

svc_rdma_pcl.h

…

svc_rdma.h

…

svc_xprt.h

…

svc.h

SUNRPC: Fix svcxdr_init_encode's buflen calculation

2022-10-26 12:34:38 +02:00

svcauth_gss.h

…

svcauth.h

…

svcsock.h

…

timer.h

…

types.h

…

xdr.h

…

xprt.h

…

xprtmultipath.h

…

xprtrdma.h

…

xprtsock.h

…