diff options
| author | J. Bruce Fields | 2013-06-26 17:09:06 +0200 |
|---|---|---|
| committer | J. Bruce Fields | 2013-07-01 23:32:04 +0200 |
| commit | cf3aa02cb4a0c5af5557dd47f15a08a7df33182a (patch) | |
| tree | 54995388695e95c0abed33d68171ca160c5bfd2d /fs | |
| parent | nfsd4: minor read_buf cleanup (diff) | |
| download | kernel-qcow2-linux-cf3aa02cb4a0c5af5557dd47f15a08a7df33182a.tar.gz kernel-qcow2-linux-cf3aa02cb4a0c5af5557dd47f15a08a7df33182a.tar.xz kernel-qcow2-linux-cf3aa02cb4a0c5af5557dd47f15a08a7df33182a.zip | |
svcrpc: fix handling of too-short rpc's
If we detect that an rpc is too short, we abort and close the
connection. Except, there's a bug here: we're leaving sk_datalen
nonzero without leaving any pages in the sk_pages array. The most
likely result of the inconsistency is a subsequent crash in
svc_tcp_clear_pages.
Also demote the BUG_ON in svc_tcp_clear_pages to a WARN.
Cc: stable@kernel.org
Signed-off-by: J. Bruce Fields <bfields@redhat.com>
Diffstat (limited to 'fs')
0 files changed, 0 insertions, 0 deletions