[U-Boot] [PATCH 3/5] CVE-2019-14194/CVE-2019-14198: nfs: fix unbounded memcpy with a failed length check at nfs_read_reply

2019-08-21 Thread Cheng Liu
CVE-2019-14194/CVE-2019-14198: nfs: fix unbounded memcpy with a failed length check at nfs_read_reply This patch adds a check to rpc_pkt.u.reply.data at nfs_read_reply. Signed-off-by: Cheng Liu --- net/nfs.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/net/nfs.c b/net/nfs.c index

[U-Boot] [PATCH 2/5] CVE: nfs: fix stack-based buffer overflow in some nfs_handler reply helper functions

2019-08-21 Thread Cheng Liu
CVE: nfs: fix stack-based buffer overflow in some nfs_handler reply helper functions This patch adds a check to nfs_handler to fix buffer overflow for CVE-2019-14197, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203 and CVE-2019-14204. Signed-off-by: Cheng Liu --- net/nfs.c

[U-Boot] [PATCH 4/5] CVE-2019-14195: nfs: fix unbounded memcpy with unvalidated length at nfs_readlink_reply

2019-08-21 Thread Cheng Liu
CVE-2019-14195: nfs: fix unbounded memcpy with unvalidated length at nfs_readlink_reply This patch adds a check to rpc_pkt.u.reply.data at nfs_readlink_reply. Signed-off-by: Cheng Liu --- net/nfs.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/net/nfs.c b/net/nfs.c index 11941fa

[U-Boot] [PATCH 1/5] CVE: net: fix unbounded memcpy of UDP packet

2019-08-21 Thread Cheng Liu
CVE: net: fix unbounded memcpy of UDP packet This patch adds a check to udp_len to fix unbounded memcpy for CVE-2019-14192, CVE-2019-14193 and CVE-2019-14199. Signed-off-by: Cheng Liu --- net/net.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/net/net.c b/net/net.c index 40511db

[U-Boot] [PATCH 5/5] CVE-2019-14196: nfs: fix unbounded memcpy with a failed length check at nfs_lookup_reply

2019-08-21 Thread Cheng Liu
CVE-2019-14196: nfs: fix unbounded memcpy with a failed length check at nfs_lookup_reply This patch adds a check to rpc_pkt.u.reply.data at nfs_lookup_reply. Signed-off-by: Cheng Liu --- net/nfs.c | 4 1 file changed, 4 insertions(+) diff --git a/net/nfs.c b/net/nfs.c index 915acd9