Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-12911

Setting a LOV EA can access or change outside allocated buffer

XMLWordPrintable

    • 3
    • 9223372036854775807

      The attribute passed to ll_setstripe_ea() is copied to a buffer allocated  based on size information passed from userspace.

      But the contents of this attribute are analyized and possibly changed (in ll_adjust_lum) before the size is validated.

      This can result in a warning from KASAN, and could result in memory corruption.

      The size should be validated before, or while, the attribute is examined.

       

            neilb Neil Brown (Inactive)
            neilb Neil Brown (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: