Re: [PATCH 1/1] CVE-2022-30767: unbounded memcpy with a failed length check

2022-06-06 Thread gerbert
Tom Rini писал 2022-06-06 17:43: On Thu, Jun 02, 2022 at 09:18:42PM +0300, gerbert wrote: This patch tries to fix a CVE-2019-14196 fix In if-condition, where NFSV2_FLAG is checked, memcpy call is performed to transfer a reply data of NFS_FHSIZE size. Since the data field in struct rpc_t st

Re: [PATCH 1/1] CVE-2022-30767: unbounded memcpy with a failed length check

2022-06-06 Thread Tom Rini
On Thu, Jun 02, 2022 at 09:18:42PM +0300, gerbert wrote: > This patch tries to fix a CVE-2019-14196 fix > > In if-condition, where NFSV2_FLAG is checked, memcpy call is performed > to transfer a reply data of NFS_FHSIZE size. Since the data field in > struct rpc_t structure has the size of (102

Re: [PATCH 1/1] CVE-2022-30767: unbounded memcpy with a failed length check

2022-06-04 Thread gerbert
Heinrich Schuchardt писал 2022-06-04 20:44: On 6/2/22 20:32, gerbert wrote: This patch tries to fix a CVE-2019-14196 fix   In if-condition, where NFSV2_FLAG is checked, memcpy call is performed to transfer a reply data of NFS_FHSIZE size. Since the data field in struct rpc_t structure has th

Re: [PATCH 1/1] CVE-2022-30767: unbounded memcpy with a failed length check

2022-06-04 Thread Heinrich Schuchardt
On 6/2/22 20:32, gerbert wrote: This patch tries to fix a CVE-2019-14196 fix   In if-condition, where NFSV2_FLAG is checked, memcpy call is performed to transfer a reply data of NFS_FHSIZE size. Since the data field in struct rpc_t structure has the size of (1024 / 4) + 26 = 282, while NFS_FHSI

[PATCH 1/1] CVE-2022-30767: unbounded memcpy with a failed length check

2022-06-03 Thread gerbert
This patch tries to fix a CVE-2019-14196 fix In if-condition, where NFSV2_FLAG is checked, memcpy call is performed to transfer a reply data of NFS_FHSIZE size. Since the data field in struct rpc_t structure has the size of (1024 / 4) + 26 = 282, while NFS_FHSIZE is only 32, it won't lead to ou

[PATCH 1/1] CVE-2022-30767: unbounded memcpy with a failed length check

2022-06-03 Thread gerbert
This patch tries to fix a CVE-2019-14196 fix In if-condition, where NFSV2_FLAG is checked, memcpy call is performed to transfer a reply data of NFS_FHSIZE size. Since the data field in struct rpc_t structure has the size of (1024 / 4) + 26 = 282, while NFS_FHSIZE is only 32, it won't lead to ou