FreeBSD Bugzilla – Attachment 229752 Details for
Bug 260071
bad slotid in SEQUENCE reply can crash NFS v4 client
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
Check that slot in Sequence reply is the same as in the request
crash3.patch (text/plain), 763 bytes, created by
Rick Macklem
on 2021-11-27 02:09:07 UTC
(
hide
)
Description:
Check that slot in Sequence reply is the same as in the request
Filename:
MIME Type:
Creator:
Rick Macklem
Created:
2021-11-27 02:09:07 UTC
Size:
763 bytes
patch
obsolete
>--- sys/fs/nfs/nfs_commonkrpc.c.crash3 2021-11-26 16:07:54.180973000 -0800 >+++ sys/fs/nfs/nfs_commonkrpc.c 2021-11-26 16:54:00.514098000 -0800 >@@ -1038,6 +1038,18 @@ tryagain: > tl += NFSX_V4SESSIONID / NFSX_UNSIGNED; > retseq = fxdr_unsigned(uint32_t, *tl++); > slot = fxdr_unsigned(int, *tl++); >+ if ((nd->nd_flag & ND_HASSLOTID) != 0) { >+ if (slot != nd->nd_slotid) { >+ printf("newnfs_request:" >+ " Wrong session " >+ "slot=%d\n", slot); >+ slot = nd->nd_slotid; >+ } >+ } else if (slot != 0) { >+ printf("newnfs_request: Bad " >+ "session slot=%d\n", slot); >+ slot = 0; >+ } > freeslot = slot; > if (retseq != sep->nfsess_slotseq[slot]) > printf("retseq diff 0x%x\n",
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=229752">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 260071
:
229750
| 229752