Re: [PATCH] nfsd: zero NFSv4 COMPOUND tag padding
From: Chuck Lever
Date: Tue Sep 15 2026 - 15:33:55 EST
On Tue, 15 Sep 2026 13:00:49 -0300, Aldo Ariel Panzardo wrote:
> nfs4svc_encode_compoundres() copies the tag bytes into reserved XDR space
> and skips directly to the aligned end of the field. xdr_reserve_space()
> rounds the reservation up but does not initialize the padding bytes.
>
> A remote client can choose a tag length that is not a multiple of four,
> causing one to three stale bytes from the response page to be returned in
> the COMPOUND reply.
>
> [...]
Applied to nfsd-testing, thanks!
[1/1] nfsd: zero NFSv4 COMPOUND tag padding
commit: 28c0a5693a60625fb794943f2755c4bc5643f7c4
--
Chuck Lever