diff options
| author | Hui Peng <benquike@gmail.com> | 2026-10-29 05:58:00 +0000 |
|---|---|---|
| committer | Dominique Martinet <asmadeus@codewreck.org> | 2026-10-29 06:05:55 +0000 |
| commit | 241d4690122658a3cdb434de4d996ef269d6244d (patch) | |
| tree | e1bdff30a617fb2a79f6bdf93e6985c261218bf8 /scripts/basic/split-include.c | |
| parent | 56894cadf21c34abbba7f74b8f5d78dabf69dd39 (diff) | |
| download | linux-241d4690122658a3cdb434de4d996ef269d6244d.tar.gz linux-241d4690122658a3cdb434de4d996ef269d6244d.zip | |
9p: reject RERROR/RLERROR with zero errcode
In p9_check_errors() (net/9p/client.c), a malicious or buggy 9p server
returning P9_RERROR or P9_RLERROR with ecode == 0 causes
p9_check_errors() to return 0 (success) while leaving the unparsed
response payload as if the expected reply message type succeeded.
Map ecode == 0 on RERROR / RLERROR to -EPROTO.
Link: https://lore.kernel.org/all/20260919221734.3708000-1-benquike@gmail.com/
Signed-off-by: Hui Peng <benquike@gmail.com>
Message-ID: <20261029055801.3-1-asmadeus@codewreck.org>
Signed-off-by: Dominique Martinet <asmadeus@codewreck.org>
Diffstat (limited to 'scripts/basic/split-include.c')
0 files changed, 0 insertions, 0 deletions