diff options
| author | Takashi Iwai <tiwai@suse.de> | 2024-10-25 10:54:09 +0200 |
|---|---|---|
| committer | Takashi Iwai <tiwai@suse.de> | 2024-10-25 10:54:09 +0200 |
| commit | 0216ded72db896b24cbdd8cd6531482571b25cf6 (patch) | |
| tree | 56b578e29657bd3df8236c5f0cf6b8f13c17232a /fs/nfs/callback_xdr.c | |
| parent | 52345d35622026b99271edc1c58ad7cfef3b7567 (diff) | |
| parent | 04177158cf98a79744937893b100020d77e6f9ac (diff) | |
Merge branch 'topic/compress-accel' into for-next
Pull compress-offload API extension for accel operation mode
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Diffstat (limited to 'fs/nfs/callback_xdr.c')
| -rw-r--r-- | fs/nfs/callback_xdr.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/fs/nfs/callback_xdr.c b/fs/nfs/callback_xdr.c index 6df77f008d3f..fdeb0b34a3d3 100644 --- a/fs/nfs/callback_xdr.c +++ b/fs/nfs/callback_xdr.c @@ -375,6 +375,8 @@ static __be32 decode_rc_list(struct xdr_stream *xdr, rc_list->rcl_nrefcalls = ntohl(*p++); if (rc_list->rcl_nrefcalls) { + if (unlikely(rc_list->rcl_nrefcalls > xdr->buf->len)) + goto out; p = xdr_inline_decode(xdr, rc_list->rcl_nrefcalls * 2 * sizeof(uint32_t)); if (unlikely(p == NULL)) |