[LU-16513] Check changlog record size in liblustreapi_chlg.c Created: 30/Jan/23 Updated: 30/Jan/23 |
|
| Status: | Open |
| Project: | Lustre |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | Bug | Priority: | Minor |
| Reporter: | Tim Day | Assignee: | Tim Day |
| Resolution: | Unresolved | Votes: | 0 |
| Labels: | None | ||
| Severity: | 3 |
| Rank (Obsolete): | 9223372036854775807 |
| Description |
|
Add protection during changelog record copy. The size of the changelog is not currently checked, which could cause memory corruption. There is a "TODO" comment mentioning something similar, "check changelog_rec_size" which was added in https://review.whamcloud.com/c/fs/lustre-release/+/18900 when the original code was written. |
| Comments |
| Comment by Gerrit Updater [ 30/Jan/23 ] |
|
"Timothy Day <timday@amazon.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/49813 |