• Y
    nfs: Fix NULL pointer dereference of dev_name · dcd2c5f3
    Yao Liu 提交于
    mainline inclusion
    from mainline-
    commit 80ff00172407
    category: bugfix
    bugzilla: 7227
    CVE: NA
    
    -------------------------------------------------
    
    There is a NULL pointer dereference of dev_name in nfs_parse_devname()
    
    The oops looks something like:
    
      BUG: unable to handle kernel NULL pointer dereference at 0000000000000000
      ...
      RIP: 0010:nfs_fs_mount+0x3b6/0xc20 [nfs]
      ...
      Call Trace:
       ? ida_alloc_range+0x34b/0x3d0
       ? nfs_clone_super+0x80/0x80 [nfs]
       ? nfs_free_parsed_mount_data+0x60/0x60 [nfs]
       mount_fs+0x52/0x170
       ? __init_waitqueue_head+0x3b/0x50
       vfs_kern_mount+0x6b/0x170
       do_mount+0x216/0xdc0
       ksys_mount+0x83/0xd0
       __x64_sys_mount+0x25/0x30
       do_syscall_64+0x65/0x220
       entry_SYSCALL_64_after_hwframe+0x49/0xbe
    
    Fix this by adding a NULL check on dev_name
    Signed-off-by: NYao Liu <yotta.liu@ucloud.cn>
    Signed-off-by: NAnna Schumaker <Anna.Schumaker@Netapp.com>
    Signed-off-by: NZhangXiaoxu <zhangxiaoxu5@huawei.com>
    Reviewed-by: NMiao Xie <miaoxie@huawei.com>
    Signed-off-by: NYang Yingliang <yangyingliang@huawei.com>
    dcd2c5f3
super.c 75.9 KB