]> git.baikalelectronics.ru Git - kernel.git/commit
nvme-tcp: fix UAF when detecting digest errors
authorSagi Grimberg <sagi@grimberg.me>
Mon, 5 Sep 2022 10:54:17 +0000 (13:54 +0300)
committerChristoph Hellwig <hch@lst.de>
Tue, 6 Sep 2022 04:40:40 +0000 (06:40 +0200)
commit975177e681319f9385e03be3e48fbde535e0029d
tree7cd6018eb57355fd8bef27bda7aa27e17a4fd24b
parent08f3abf8ad87686e1ff4d6bc51d491d947cb7dc8
nvme-tcp: fix UAF when detecting digest errors

We should also bail from the io_work loop when we set rd_enabled to true,
so we don't attempt to read data from the socket when the TCP stream is
already out-of-sync or corrupted.

Fixes: 1fcf4b8ae898 ("nvme-tcp: add NVMe over TCP host driver")
Reported-by: Daniel Wagner <dwagner@suse.de>
Signed-off-by: Sagi Grimberg <sagi@grimberg.me>
Reviewed-by: Daniel Wagner <dwagner@suse.de>
Signed-off-by: Christoph Hellwig <hch@lst.de>
drivers/nvme/host/tcp.c