diff options
| author | Leo Stone <leocstone@gmail.com> | 2024-12-18 10:49:57 -0800 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2025-01-09 13:33:40 +0100 |
| commit | 86645d8d062af3fdcbdaa0a289b95de55bca827d (patch) | |
| tree | 3ea02988e426c2d0fa465abf9ab802a1c019a809 /scripts/include | |
| parent | 1ee54d58d58b35234ea5a0421e6d16d83c3187a3 (diff) | |
| download | linux-86645d8d062af3fdcbdaa0a289b95de55bca827d.tar.gz linux-86645d8d062af3fdcbdaa0a289b95de55bca827d.tar.bz2 linux-86645d8d062af3fdcbdaa0a289b95de55bca827d.zip | |
nvmet: Don't overflow subsysnqn
[ Upstream commit 4db3d750ac7e894278ef1cb1c53cc7d883060496 ]
nvmet_root_discovery_nqn_store treats the subsysnqn string like a fixed
size buffer, even though it is dynamically allocated to the size of the
string.
Create a new string with kstrndup instead of using the old buffer.
Reported-by: syzbot+ff4aab278fa7e27e0f9e@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=ff4aab278fa7e27e0f9e
Fixes: 95409e277d83 ("nvmet: implement unique discovery NQN")
Signed-off-by: Leo Stone <leocstone@gmail.com>
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Keith Busch <kbusch@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'scripts/include')
0 files changed, 0 insertions, 0 deletions