Re: [U-Boot] [PATCH v2 4/5] CVE-2019-14195: nfs: fix unbounded memcpy with unvalidated length at nfs_readlink_reply //RE: [PATCH 4/5] CVE-2019-14195: nfs: fix unbounded memcpy with unvalidated length at nfs_readlink_reply

On Thu, Aug 29, 2019 at 8:50 AM liucheng (G) liucheng32@huawei.com wrote:

Changes in v2:

• Add reported-by tag for patch 4/5

---

CVE-2019-14195: nfs: fix unbounded memcpy with unvalidated length at nfs_readlink_reply

This patch adds a check to rpc_pkt.u.reply.data at nfs_readlink_reply.

Signed-off-by: Cheng Liu liucheng32@huawei.com Reported-by: Fermín Serna fermin@semmle.com

Acked-by: Joe Hershberger joe.hershberger@ni.com