Chuck Lever 804d8e0a6e NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
OPDESC() simply indexes into nfsd4_ops[] by the op's operation
number, without range checking that value. It assumes callers are
careful to avoid calling it with an out-of-bounds opnum value.

nfsd4_decode_compound() is not so careful, and can invoke OPDESC()
with opnum set to OP_ILLEGAL, which is 10044 -- well beyond the end
of nfsd4_ops[].

Reported-by: Jeff Layton <jlayton@kernel.org>
Fixes: f4f9ef4a1b0a ("nfsd4: opdesc will be useful outside nfs4proc.c")
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
2023-03-31 17:28:49 -04:00
..
2022-11-28 12:54:44 -05:00
2021-12-03 18:44:06 +01:00
2022-11-28 12:54:44 -05:00
2023-03-10 09:38:47 -05:00
2021-10-02 15:51:10 -04:00
2022-09-26 14:02:47 -04:00
2022-10-20 10:13:27 +02:00
2022-12-19 09:10:33 -06:00
2022-11-28 12:54:44 -05:00
2022-10-06 17:13:18 -07:00
2023-02-20 09:20:59 -05:00
2022-09-26 14:02:47 -04:00
2021-12-13 13:42:51 -05:00
2023-02-20 09:20:21 -05:00