]> www.infradead.org Git - users/jedix/linux-maple.git/commit
SUNRPC: Fix loop termination condition in gss_free_in_token_pages()
authorChuck Lever <chuck.lever@oracle.com>
Sun, 2 Jun 2024 22:15:25 +0000 (18:15 -0400)
committerChuck Lever <chuck.lever@oracle.com>
Mon, 3 Jun 2024 13:07:55 +0000 (09:07 -0400)
commit4a77c3dead97339478c7422eb07bf4bf63577008
treeb62cb2c16c365df73819f2098033157648a70ec2
parent8d915bbf39266bb66082c1e4980e123883f19830
SUNRPC: Fix loop termination condition in gss_free_in_token_pages()

The in_token->pages[] array is not NULL terminated. This results in
the following KASAN splat:

  KASAN: maybe wild-memory-access in range [0x04a2013400000008-0x04a201340000000f]

Fixes: bafa6b4d95d9 ("SUNRPC: Fix gss_free_in_token_pages()")
Reviewed-by: Benjamin Coddington <bcodding@redhat.com>
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
net/sunrpc/auth_gss/svcauth_gss.c