Re: [patch v2] sunrpc: integer underflow in rsc_parse()

2015-02-26 Thread J. Bruce Fields
On Tue, Feb 24, 2015 at 10:54:44PM -0500, Simo Sorce wrote: > On Tue, 2015-02-24 at 18:34 +0300, Dan Carpenter wrote: > > If we call groups_alloc() with invalid values then it's might lead to > > memory corruption. For example, with a negative value then we might not > > allocate enough for sizeof

Re: [patch v2] sunrpc: integer underflow in rsc_parse()

2015-02-24 Thread Simo Sorce
On Tue, 2015-02-24 at 18:34 +0300, Dan Carpenter wrote: > If we call groups_alloc() with invalid values then it's might lead to > memory corruption. For example, with a negative value then we might not > allocate enough for sizeof(struct group_info). > > Signed-off-by: Dan Carpenter > --- > v2:

[patch v2] sunrpc: integer underflow in rsc_parse()

2015-02-24 Thread Dan Carpenter
If we call groups_alloc() with invalid values then it's might lead to memory corruption. For example, with a negative value then we might not allocate enough for sizeof(struct group_info). Signed-off-by: Dan Carpenter --- v2: In v1, I changed groups_alloc(). The other places which call groups_