Page MenuHomeFreeBSD

nfs_commonsubs.c: Add a sanity check for nid_ngroup
ClosedPublic

Authored by rmacklem on Oct 28 2025, 12:29 AM.
Tags
None
Referenced Files
F170753542: D53389.id165173.diff
Sun, Sep 6, 10:27 AM
F170612499: D53389.id165214.diff
Sat, Sep 5, 3:38 PM
F170611561: D53389.id165214.diff
Sat, Sep 5, 3:33 PM
Unknown Object (File)
Sat, Sep 5, 2:23 PM
Unknown Object (File)
Sat, Sep 5, 10:10 AM
Unknown Object (File)
Fri, Sep 4, 11:58 PM
Unknown Object (File)
Fri, Sep 4, 11:53 PM
Unknown Object (File)
Thu, Sep 3, 10:08 AM
Subscribers

Details

Summary

The nfsuserd(8) daemon passes user credentials
(uid + gids) into the kernel for users and groups
identified by name (received from a NFSv4 server).

This patch add a sanity check for the number of
groups (nid_ngroup) passed in.

It's only purpose is to protect against a bogus
nfsuserd(8) running in a jail.

Test Plan

Only tested for a valid working nfsuserd(8) daemon.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable