From: Benjamin Coddington Date: Wed, 6 Apr 2016 15:32:52 +0000 (-0400) Subject: SUNRPC: init xdr_stream for zero iov_len, page_len X-Git-Tag: v4.14-rc1~3131^2~57 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=06ef26a0e35199cc0445d7d5708533a12af8ff5b;p=platform%2Fkernel%2Flinux-rpi.git SUNRPC: init xdr_stream for zero iov_len, page_len An xdr_buf with head[0].iov_len = 0 and page_len = 0 will cause xdr_init_decode() to incorrectly setup the xdr_stream. Specifically, xdr->end is never initialized. Signed-off-by: Benjamin Coddington Signed-off-by: Anna Schumaker --- diff --git a/net/sunrpc/xdr.c b/net/sunrpc/xdr.c index 6bdb386..c4f3cc0 100644 --- a/net/sunrpc/xdr.c +++ b/net/sunrpc/xdr.c @@ -797,6 +797,8 @@ void xdr_init_decode(struct xdr_stream *xdr, struct xdr_buf *buf, __be32 *p) xdr_set_iov(xdr, buf->head, buf->len); else if (buf->page_len != 0) xdr_set_page_base(xdr, 0, buf->len); + else + xdr_set_iov(xdr, buf->head, buf->len); if (p != NULL && p > xdr->p && xdr->end >= p) { xdr->nwords -= p - xdr->p; xdr->p = p;