[Bug 260293] big counts in LAYOUTRETURN can cause NFS v4 nfsrv_flexlayouterr() to page-fault
Date: Mon, 13 Dec 2021 05:30:46 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=260293 Rick Macklem <rmacklem@FreeBSD.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs@FreeBSD.org |rmacklem@FreeBSD.org Status|New |Open --- Comment #1 from Rick Macklem <rmacklem@FreeBSD.org> --- Created attachment 230070 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=230070&action=edit check against maxcnt when parsing a flex file error reply This patch decrements maxcnt by the appropriate number of bytes during parsing and checks to see if there is data remaining. If not, it just returns from nfsrv_flexlayouterr() without further processing. This should fix the crashes. Maybe the reporter can check to confirm that the patch fixes the problem for him? -- You are receiving this mail because: You are the assignee for the bug.