Unverified Commit 4e080e2b authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!4290 net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv 

Merge Pull Request from: @ci-robot 
 
PR sync from: Dong Chenchen <dongchenchen2@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/RXXMJUO5GIXZ3CBJOGYVUBCQF5M7JJ6X/ 
 
 
 
Link:https://gitee.com/openeuler/kernel/pulls/4290

 

Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents 8c10e343 0456bede

net/rds/af_rds.c

+1 −1
Original line number Diff line number Diff line
@@ -419,7 +419,7 @@ static int rds_recv_track_latency(struct rds_sock *rs, sockptr_t optval, 


	rs->rs_rx_traces = trace.rx_traces;

	for (i = 0; i < rs->rs_rx_traces; i++) {

		if (trace.rx_trace_pos[i] > RDS_MSG_RX_DGRAM_TRACE_MAX) {

		if (trace.rx_trace_pos[i] >= RDS_MSG_RX_DGRAM_TRACE_MAX) {

			rs->rs_rx_traces = 0;

			return -EFAULT;

		}