]> git.itanic.dy.fi Git - linux-stable/commit
nvme-tcp: fix UAF when detecting digest errors
authorSagi Grimberg <sagi@grimberg.me>
Mon, 5 Sep 2022 10:54:17 +0000 (13:54 +0300)
committerChristoph Hellwig <hch@lst.de>
Tue, 6 Sep 2022 04:40:40 +0000 (06:40 +0200)
commit160f3549a907a50e51a8518678ba2dcf2541abea
tree7cd6018eb57355fd8bef27bda7aa27e17a4fd24b
parent6a02a61e81c231cc5c680c5dbf8665275147ac52
nvme-tcp: fix UAF when detecting digest errors

We should also bail from the io_work loop when we set rd_enabled to true,
so we don't attempt to read data from the socket when the TCP stream is
already out-of-sync or corrupted.

Fixes: 3f2304f8c6d6 ("nvme-tcp: add NVMe over TCP host driver")
Reported-by: Daniel Wagner <dwagner@suse.de>
Signed-off-by: Sagi Grimberg <sagi@grimberg.me>
Reviewed-by: Daniel Wagner <dwagner@suse.de>
Signed-off-by: Christoph Hellwig <hch@lst.de>
drivers/nvme/host/tcp.c