CVE-2019-14195: nfs: fix unbounded memcpy with unvalidated length at nfs_readlink_reply
authorliucheng (G) <liucheng32@huawei.com>
Thu, 29 Aug 2019 13:47:54 +0000 (13:47 +0000)
committerJoe Hershberger <joe.hershberger@ni.com>
Wed, 4 Sep 2019 16:37:19 +0000 (11:37 -0500)
commitcf3a4f1e86ecdd24f87b615051b49d8e1968c230
tree7ccee6d442944ff635fc3962b67ce641c104dd78
parentaa207cf3a6d68f39d64cd29057a4fb63943e9078
CVE-2019-14195: nfs: fix unbounded memcpy with unvalidated length at nfs_readlink_reply

This patch adds a check to rpc_pkt.u.reply.data at nfs_readlink_reply.

Signed-off-by: Cheng Liu <liucheng32@huawei.com>
Reported-by: Fermín Serna <fermin@semmle.com>
Acked-by: Joe Hershberger <joe.hershberger@ni.com>
net/nfs.c