]> www.infradead.org Git - users/jedix/linux-maple.git/commit
RDS: null pointer dereference in rds_atomic_free_op
authorMohamed Ghannam <simo.ghannam@gmail.com>
Wed, 3 Jan 2018 21:06:06 +0000 (21:06 +0000)
committerBrian Maly <brian.maly@oracle.com>
Mon, 21 May 2018 21:07:09 +0000 (17:07 -0400)
commitc7152bf5f692d390f6c1ffc29c3fb398a0e3e6f5
tree45a9f0d83c54a59b46eeedfbb3c943039c086551
parent9973154d014f4e69efefcaca31d304cc29429fb8
RDS: null pointer dereference in rds_atomic_free_op

Orabug: 27422832
CVE: CVE-2018-5333

set rm->atomic.op_active to 0 when rds_pin_pages() fails
or the user supplied address is invalid,
this prevents a NULL pointer usage in rds_atomic_free_op()

Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
(cherry picked from commit 7d11f77f84b27cef452cee332f4e469503084737)

Reviewed-by: Shan Hai <shan.hai@oracle.com>
Signed-off-by: Allen Pais <allen.pais@oracle.com>
Signed-off-by: Brian Maly <brian.maly@oracle.com>
net/rds/rdma.c