Re: [U-Boot] [PATCH v2 2/5] CVE: nfs: fix stack-based buffer overflow in some nfs_handler reply helper functions //RE: [PATCH 2/5] CVE: nfs: fix stack-based buffer overflow in some nfs_handler reply helper functions

On Thu, Aug 29, 2019 at 8:48 AM liucheng (G) liucheng32@huawei.com wrote:

Changes in v2:

• Add reported-by tag for patch 2/5

---

CVE: nfs: fix stack-based buffer overflow in some nfs_handler reply helper functions

This patch adds a check to nfs_handler to fix buffer overflow for CVE-2019-14197, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203 and CVE-2019-14204.

Signed-off-by: Cheng Liu liucheng32@huawei.com Reported-by: Fermín Serna fermin@semmle.com

Acked-by: Joe Hershberger joe.hershberger@ni.com