diff options
| author | Dan Carpenter <[email protected]> | 2024-09-19 08:50:33 +0000 |
|---|---|---|
| committer | Anna Schumaker <[email protected]> | 2024-10-03 20:19:13 +0000 |
| commit | 6dbf1f341b6b35bcc20ff95b6b315e509f6c5369 (patch) | |
| tree | e68700cb37b3d3c05dfa1ea5eba6f37ef15d9b71 /rust/helpers/workqueue.c | |
| parent | sunrpc: fix prog selection loop in svc_process_common (diff) | |
| download | kernel-6dbf1f341b6b35bcc20ff95b6b315e509f6c5369.tar.gz kernel-6dbf1f341b6b35bcc20ff95b6b315e509f6c5369.zip | |
SUNRPC: Fix integer overflow in decode_rc_list()
The math in "rc_list->rcl_nrefcalls * 2 * sizeof(uint32_t)" could have an
integer overflow. Add bounds checking on rc_list->rcl_nrefcalls to fix
that.
Fixes: 4aece6a19cf7 ("nfs41: cb_sequence xdr implementation")
Signed-off-by: Dan Carpenter <[email protected]>
Signed-off-by: Anna Schumaker <[email protected]>
Diffstat (limited to 'rust/helpers/workqueue.c')
0 files changed, 0 insertions, 0 deletions