CVE-2019-14196: nfs: fix unbounded memcpy with a failed length check at nfs_lookup_reply
authorliucheng (G) <liucheng32@huawei.com>
Thu, 29 Aug 2019 13:48:02 +0000 (13:48 +0000)
committerJoe Hershberger <joe.hershberger@ni.com>
Wed, 4 Sep 2019 16:37:19 +0000 (11:37 -0500)
commit5d14ee4e53a81055d34ba280cb8fd90330f22a96
treed38ed9d6724fd99924f1377fec64f930bbc2c452
parentcf3a4f1e86ecdd24f87b615051b49d8e1968c230
CVE-2019-14196: nfs: fix unbounded memcpy with a failed length check at nfs_lookup_reply

This patch adds a check to rpc_pkt.u.reply.data at nfs_lookup_reply.

Signed-off-by: Cheng Liu <liucheng32@huawei.com>
Reported-by: Fermín Serna <fermin@semmle.com>
Acked-by: Joe Hershberger <joe.hershberger@ni.com>
net/nfs.c