git.openpandora.org / pandora-u-boot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 741a8a0) | patch
CVE-2019-14194/CVE-2019-14198: nfs: fix unbounded memcpy with a failed length check...
authorliucheng (G) <liucheng32@huawei.com>
Thu, 29 Aug 2019 13:47:48 +0000 (13:47 +0000)
committerJoe Hershberger <joe.hershberger@ni.com>
Wed, 4 Sep 2019 16:37:19 +0000 (11:37 -0500)
commitaa207cf3a6d68f39d64cd29057a4fb63943e9078
tree25c1197dff0ca99de4c920efac3e92cf2e955245tree | snapshot
parent741a8a08ebe5bc3ccfe3cde6c2b44ee53891af21commit | diff
CVE-2019-14194/CVE-2019-14198: nfs: fix unbounded memcpy with a failed length check at nfs_read_reply

This patch adds a check to rpc_pkt.u.reply.data at nfs_read_reply.

Signed-off-by: Cheng Liu <liucheng32@huawei.com>
Reported-by: Fermín Serna <fermin@semmle.com>
Acked-by: Joe Hershberger <joe.hershberger@ni.com>
net/nfs.c diff | blob | history
Pandora U-Boot Repository