Commit 06ef26a0 authored Apr 06, 2016 by Benjamin Coddington Committed by Anna Schumaker May 09, 2016

SUNRPC: init xdr_stream for zero iov_len, page_len



An xdr_buf with head[0].iov_len = 0 and page_len = 0 will cause
xdr_init_decode() to incorrectly setup the xdr_stream.  Specifically,
xdr->end is never initialized.

Signed-off-by: Benjamin Coddington <bcodding@redhat.com>
Signed-off-by: Anna Schumaker <Anna.Schumaker@Netapp.com>

parent fe238e60

net/sunrpc/xdr.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -797,6 +797,8 @@ void xdr_init_decode(struct xdr_stream xdr, struct xdr_buf buf, __be32 *p)
		xdr_set_iov(xdr, buf->head, buf->len);
		else if (buf->page_len != 0)
		xdr_set_page_base(xdr, 0, buf->len);
		else
		xdr_set_iov(xdr, buf->head, buf->len);
		if (p != NULL && p > xdr->p && xdr->end >= p) {
		xdr->nwords -= p - xdr->p;
		xdr->p = p;