* [PATCH] dm snap : add sanity checks to snapshot_ctr
@ 2020-12-28 2:55 Defang Bo
0 siblings, 0 replies; 2+ messages in thread
From: Defang Bo @ 2020-12-28 2:55 UTC (permalink / raw)
To: agk, snitzer, dm-devel; +Cc: linux-kernel, Defang Bo
Similar to commit<70de2cbda8a5>("dm thin: add sanity checks
to thin-pool and external snapshot creation"),there should be a check
for argc and argv to prevent Null pointer dereferencing when the dm_get_device
invoked twice on the same device path with differnt mode.
Signed-off-by: Defang Bo <bodefang@126.com>
---
drivers/md/dm-snap.c | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/drivers/md/dm-snap.c b/drivers/md/dm-snap.c
index 4668b2c..dccce8b 100644
--- a/drivers/md/dm-snap.c
+++ b/drivers/md/dm-snap.c
@@ -1258,6 +1258,13 @@ static int snapshot_ctr(struct dm_target *ti, unsigned int argc, char **argv)
as.argc = argc;
as.argv = argv;
+
+ if (!strcmp(argv[0], argv[1])) {
+ ti->error = "Error setting metadata or data device";
+ r = -EINVAL;
+ goto bad;
+ }
+
dm_consume_args(&as, 4);
r = parse_snapshot_features(&as, s, ti);
if (r)
--
2.7.4
^ permalink raw reply [flat|nested] 2+ messages in thread* [PATCH] dm snap : add sanity checks to snapshot_ctr
@ 2020-12-25 6:48 Defang Bo
0 siblings, 0 replies; 2+ messages in thread
From: Defang Bo @ 2020-12-25 6:48 UTC (permalink / raw)
To: agk, snitzer; +Cc: linux-kernel, Defang Bo
Similar to commit<70de2cbd>,there should be a check for argc and argv to prevent Null pointer dereferencing
when the dm_get_device invoked twice on the same device path with differnt mode.
Signed-off-by: Defang Bo <bodefang@126.com>
---
drivers/md/dm-snap.c | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/drivers/md/dm-snap.c b/drivers/md/dm-snap.c
index 4668b2c..dccce8b 100644
--- a/drivers/md/dm-snap.c
+++ b/drivers/md/dm-snap.c
@@ -1258,6 +1258,13 @@ static int snapshot_ctr(struct dm_target *ti, unsigned int argc, char **argv)
as.argc = argc;
as.argv = argv;
+
+ if (!strcmp(argv[0], argv[1])) {
+ ti->error = "Error setting metadata or data device";
+ r = -EINVAL;
+ goto bad;
+ }
+
dm_consume_args(&as, 4);
r = parse_snapshot_features(&as, s, ti);
if (r)
--
2.7.4
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2020-12-28 7:31 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-12-28 2:55 [PATCH] dm snap : add sanity checks to snapshot_ctr Defang Bo
-- strict thread matches above, loose matches on Subject: below --
2020-12-25 6:48 Defang Bo
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®