zil_read_log_data: should check that lr_length and BP_GET_LSIZE(lr_blkptr) match

openzfs / zfs

OpenZFS on Linux and FreeBSD

https://openzfs.github.io/openzfs-docs

Other

10.42k stars 1.72k forks source link

zil_read_log_data: should check that lr_length and BP_GET_LSIZE(lr_blkptr) match #11658

Open problame opened 3 years ago

problame commented 3 years ago

Low profile because we trust the writer but this has potential for a buffer overflow.

https://github.com/zfsonlinux/zfs/blob/61868bb14d33e9b787ab810533c359888c1c76db/module%2Fzfs%2Fzil.c#L331

stale[bot] commented 2 years ago

This issue has been automatically marked as "stale" because it has not had any activity for a while. It will be closed in 90 days if no further activity occurs. Thank you for your contributions.

problame commented 2 years ago

Still a valid issue.