SUNRPC: init xdr_stream for zero iov_len, page_len
An xdr_buf with head[0].iov_len = 0 and page_len = 0 will cause xdr_init_decode() to incorrectly setup the xdr_stream. Specifically, xdr->end is never initialized. Signed-off-by: Benjamin Coddington <bcodding@redhat.com> Signed-off-by: Anna Schumaker <Anna.Schumaker@Netapp.com>
This commit is contained in:
parent
fe238e601d
commit
06ef26a0e3
|
@ -797,6 +797,8 @@ void xdr_init_decode(struct xdr_stream *xdr, struct xdr_buf *buf, __be32 *p)
|
||||||
xdr_set_iov(xdr, buf->head, buf->len);
|
xdr_set_iov(xdr, buf->head, buf->len);
|
||||||
else if (buf->page_len != 0)
|
else if (buf->page_len != 0)
|
||||||
xdr_set_page_base(xdr, 0, buf->len);
|
xdr_set_page_base(xdr, 0, buf->len);
|
||||||
|
else
|
||||||
|
xdr_set_iov(xdr, buf->head, buf->len);
|
||||||
if (p != NULL && p > xdr->p && xdr->end >= p) {
|
if (p != NULL && p > xdr->p && xdr->end >= p) {
|
||||||
xdr->nwords -= p - xdr->p;
|
xdr->nwords -= p - xdr->p;
|
||||||
xdr->p = p;
|
xdr->p = p;
|
||||||
|
|
Loading…
Reference in a new issue