HomeFreeBSD

nfsd: Add a sanity check for Owner/OwnerGroup string length

Description

nfsd: Add a sanity check for Owner/OwnerGroup string length

Robert Morris reported that, if a client sends an absurdly
large Owner/OwnerGroup string, the kernel malloc() for the
large size string can block forever.

This patch adds a sanity limit for Owner/OwnerGroup string
length. Since the RFCs do not specify any limit and FreeBSD
can handle a group name greater than 1Kbyte, the limit is
set at a generous 10Kbytes.

PR: 260546

(cherry picked from commit ef4edb70c909fc2b1de867601c2230597d07daa0)

Details

Provenance
rmacklemAuthored on May 4 2022, 8:58 PM
Parents
rG6835ace58091: setkey(8): Clarify language around AEAD ciphers.
Branches
Unknown
Tags
Unknown