Skip to content

Conversation

@github-actions
Copy link

@github-actions github-actions bot commented Nov 4, 2025

Summary

This PR has been automatically created after successful completion of all CI stages.

Commit Message(s)

NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

jira VULN-136577
cve CVE-2025-39730
commit-author Trond Myklebust <[email protected]>
commit ef93a685e01a281b5e2a25ce4e3428cf9371a205

The function needs to check the minimal filehandle length before it can
access the embedded filehandle.

	Reported-by: zhangjian <[email protected]>
Fixes: 20fa19027286 ("nfs: add export operations")
	Signed-off-by: Trond Myklebust <[email protected]>
(cherry picked from commit ef93a685e01a281b5e2a25ce4e3428cf9371a205)
	Signed-off-by: Shreeya Patel <[email protected]>

Test Results

✅ Build Stage

✅ Boot Verification

✅ Kernel Selftests

⚠️ Test Comparison

  • Status: Skipped
  • Reason: No baseline test results available from ciqlts9_2
  • Note: Manual review recommended to ensure no regressions

🤖 This PR was automatically generated by GitHub Actions
Run ID: 19073964070

Implements a 5-stage GitHub Actions pipeline for automated kernel testing and PR creation.
Uses kernel-container-build automated-testing-v1 branch for build/test tooling.

Stage 1: Build (15-30 min)
- Checkout kernel source + kernel-container-build repo (automated-testing-v1)
- Build kernel in CIQ builder container with kABI checking
- Convert built container to QCOW2 VM image
- Upload: kernel-build.log, QCOW2 image

Stage 2: Boot Verification (2-5 min)
- Download QCOW2 image
- Boot kernel in QEMU (KVM or TCG) and validate login prompt appears
- Upload: boot logs

Stage 3: Kernel Selftests (20-40 min)
- Download QCOW2 image
- Execute comprehensive kselftests in QEMU with dual serial consoles
- Upload: kselftest TAP logs, dmesg output

Stage 4: Compare Results (1-2 min)
Purpose: Detect test regressions by comparing against base branch

Steps:
1. Checkout with full history (fetch-depth: 0) for git merge-base ops
2. Download current kselftest logs
3. Smart base branch detection:
   - For PRs: Uses PR's target branch
   - For pushes: Sorts branches by commit date, checks 30 most recent, finds closest common ancestor via git merge-base
   - Outputs: base_branch (reused by PR stage)
4. Download baseline logs from base branch (searches last 5 successful runs)
5. Compare results:
   - Counts passing/failing tests (before/after)
   - Fails if >±3 tests changed
   - Outputs: comparison_status, comparison_message

Stage 5: Create Pull Request (1-2 min)
Purpose: Auto-create/update PR after all tests pass

Prerequisites: Only runs if build + boot + kselftest passed, no regressions detected

Steps:
1. Check all stages passed and comparison_status != failed
2. Checkout (shallow: fetch-depth: 50) for commit messages
3. Download all artifacts (build/boot/test logs)
4. Extract statistics (pass/fail counts, build times)
5. Get commit info:
   - Single commit: Use commit message
   - Multiple commits: Create summary
6. Create/Update PR:
   - Reuses base_branch from compare-results (no duplication!)
   - Generate PR body with test results via create-pr-body.sh
   - Creates new PR or updates existing one

Signed-off-by: Shreeya Patel <[email protected]>
Script to generate detailed PR descriptions with kselftest results.

Signed-off-by: Shreeya Patel <[email protected]>
- Created .container_build_image with lts-9.2-kernel-builder
- Updated workflow to remove -c option from build_kernel.sh call
- Build script will now automatically use the image specified in .container_build_image

Signed-off-by: Shreeya Patel <[email protected]>
- Workflow now checks commit message for [skip ci] or [ci skip]
- If either flag is present, the entire workflow is skipped
- Allows developers to push changes without triggering CI when not needed

Usage:
  git commit -m "docs: update README [skip ci]"
  git commit -m "wip: work in progress [ci skip]"

Signed-off-by: Shreeya Patel <[email protected]>
@shreeya-patel98
Copy link
Collaborator

Need to use the target branch name in the commit message instead of the current branch name.

jira VULN-136577
cve CVE-2025-39730
commit-author Trond Myklebust <[email protected]>
commit ef93a68

The function needs to check the minimal filehandle length before it can
access the embedded filehandle.

	Reported-by: zhangjian <[email protected]>
Fixes: 20fa190 ("nfs: add export operations")
	Signed-off-by: Trond Myklebust <[email protected]>
(cherry picked from commit ef93a68)
	Signed-off-by: Shreeya Patel <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants