ziming zhang b4368b7f97 libceph: replace BUG_ON with bounds check for map->max_osd ...

commit ec3797f043 upstream.

OSD indexes come from untrusted network packets. Boundary checks are
added to validate these against map->max_osd.

[ idryomov: drop BUG_ON in ceph_get_primary_affinity(), minor cosmetic
  edits ]

Cc: stable@vger.kernel.org
Signed-off-by: ziming zhang <ezrakiez@gmail.com>
Reviewed-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-12-07 06:27:40 +09:00

..

crush

libceph: fix crush_choose_firstn() kernel-doc warnings

2024-07-11 16:33:07 +02:00

armor.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

auth_none.c

libceph: kill ceph_none_authorizer::reply_buf

2021-06-28 23:49:25 +02:00

auth_none.h

libceph: kill ceph_none_authorizer::reply_buf

2021-06-28 23:49:25 +02:00

auth_x_protocol.h

libceph: fix some spelling mistakes

2021-06-28 23:49:25 +02:00

auth_x.c

libceph: prevent potential out-of-bounds writes in handle_auth_session_key()

2025-12-07 06:27:40 +09:00

auth_x.h

ceph: fix whitespace

2018-08-02 21:33:21 +02:00

auth.c

libceph: remove unnecessary ret variable in ceph_auth_init()

2021-06-28 23:49:25 +02:00

buffer.c

mm: allow !GFP_KERNEL allocations for kvmalloc

2022-01-15 16:30:29 +02:00

ceph_common.c

libceph: fix potential use-after-free in have_mon_and_osd_map()

2025-12-07 06:27:40 +09:00

ceph_hash.c

treewide: Use fallthrough pseudo-keyword

2020-08-23 17:36:59 -05:00

ceph_strings.c

libceph: introduce connection modes and ms_mode option

2020-12-14 23:21:50 +01:00

cls_lock_client.c

libceph: fix doc warnings in cls_lock_client.c

2021-06-28 23:49:25 +02:00

crypto.c

libceph: Remove unused ceph_crypto_key_encode

2024-11-18 17:34:35 +01:00

crypto.h

libceph: Remove unused ceph_crypto_key_encode

2024-11-18 17:34:35 +01:00

debugfs.c

libceph: fix potential use-after-free in have_mon_and_osd_map()

2025-12-07 06:27:40 +09:00

decode.c

libceph: allow addrvecs with a single NONE/blank address

2021-05-04 16:06:15 +02:00

Kconfig

lib/crc: remove CONFIG_LIBCRC32C

2025-04-04 11:31:42 -07:00

Makefile

libceph, ceph: implement msgr2.1 protocol (crc and secure modes)

2020-12-14 23:21:50 +01:00

messenger_v1.c

libceph: just wait for more data to be available on the socket

2024-02-07 14:43:29 +01:00

messenger_v2.c

ceph: fix crash in process_v2_sparse_read() for encrypted directories

2025-12-07 06:27:36 +09:00

messenger.c

libceph: fix invalid accesses to ceph_connection_v1_info

2025-09-10 21:22:56 +02:00

mon_client.c

libceph: fix race between delayed_work() and ceph_monc_stop()

2024-07-10 10:11:55 +02:00

msgpool.c

libceph: preallocate message data items

2018-10-22 10:28:22 +02:00

osd_client.c

ceph: Remove osd_client deadcode

2025-04-03 21:35:32 +02:00

osdmap.c

libceph: replace BUG_ON with bounds check for map->max_osd

2025-12-07 06:27:40 +09:00

pagelist.c

libceph: Remove unused ceph_pagelist functions

2024-11-18 17:34:35 +01:00

pagevec.c

libceph: Remove unused pagevec functions

2024-11-18 17:34:35 +01:00

snapshot.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 268

2019-06-05 17:30:29 +02:00

string_table.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

striper.c

rbd: support for object-map and fast-diff

2019-07-08 14:01:45 +02:00