summaryrefslogtreecommitdiffstats
path: root/net/ipv6/ipcomp6.c
diff options
context:
space:
mode:
authorChuck Lever <chuck.lever@oracle.com>2020-06-25 11:32:34 -0400
committerAnna Schumaker <Anna.Schumaker@Netapp.com>2020-06-26 08:45:23 -0400
commit89a3c9f5b9f0bcaa9aea3e8b2a616fcaea9aad78 (patch)
tree262957a2edb739066cd14d4894b4f091655be7dd /net/ipv6/ipcomp6.c
parentd03727b248d0dae6199569a8d7b629a681154633 (diff)
downloadlinux-89a3c9f5b9f0bcaa9aea3e8b2a616fcaea9aad78.tar.bz2
SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment()
@subbuf is an output parameter of xdr_buf_subsegment(). A survey of call sites shows that @subbuf is always uninitialized before xdr_buf_segment() is invoked by callers. There are some execution paths through xdr_buf_subsegment() that do not set all of the fields in @subbuf, leaving some pointer fields containing garbage addresses. Subsequent processing of that buffer then results in a page fault. Signed-off-by: Chuck Lever <chuck.lever@oracle.com> Cc: <stable@vger.kernel.org> Signed-off-by: Anna Schumaker <Anna.Schumaker@Netapp.com>
Diffstat (limited to 'net/ipv6/ipcomp6.c')
0 files changed, 0 insertions, 0 deletions