[PATCH v1 0/2] Fix unwanted memory overwrites

[Chuck Lever <cel@kernel.org>]

From: Chuck Lever <chuck.lever@oracle.com>

<rtm@csail.mit.edu> reported some memory overwrites that can be
triggered by NFS client input. I was able to observe overwrites
by enabling KASAN and running his reproducer [1].

NFSD caches COMPOUNDs containing only a single SEQUENCE operation
whether the client requests it to or not, in order to work around a
deficiency in the NFSv4.1 protocol. However, the predicate that
identifies solo SEQUENCE operations was incorrect.

(Based on my reading of RFC 8881, I'm not sure NFSD should cache
solo SEQUENCE operations that fail, but that is perhaps for a
different day).

Chuck Lever (2):
  NFSD: Do not cache failed SEQUENCE operations
  NFSD: Skip close replay processing if XDR encoding fails

 fs/nfsd/nfs4xdr.c | 3 +--
 fs/nfsd/xdr4.h    | 3 ++-
 2 files changed, 3 insertions(+), 3 deletions(-)

-- 
2.51.0

[1] http://www.rtmrtm.org/rtm/nfsd185f.c