| commit | 4262cd1f4b734ea5fa05c37043c89106f38b2daa | |
| author | Sachin Prabhu <sprabhu@redhat.com> | |
| Tue, 17 Apr 2012 13:36:40 +0000 (17 14:36 +0100) | ||
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
| Mon, 21 May 2012 17:46:24 +0000 (21 10:46 -0700) | ||
| tree | b77f9f9f12808de450381e0227cda3666b646d9c | treesnapshot (tar.gz zip) |
| parent | 6c9f63a43c30f496a37ade9fd4304c63df9b01bd | commitdiff |
Avoid beyond bounds copy while caching ACL
commit 5794d21ef4639f0e33440927bb903f9598c21e92 upstream.
When attempting to cache ACLs returned from the server, if the bitmap
size + the ACL size is greater than a PAGE_SIZE but the ACL size itself
is smaller than a PAGE_SIZE, we can read past the buffer page boundary.
Signed-off-by: Sachin Prabhu <sprabhu@redhat.com>
Reported-by: Jian Li <jiali@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
commit 5794d21ef4639f0e33440927bb903f9598c21e92 upstream.
When attempting to cache ACLs returned from the server, if the bitmap
size + the ACL size is greater than a PAGE_SIZE but the ACL size itself
is smaller than a PAGE_SIZE, we can read past the buffer page boundary.
Signed-off-by: Sachin Prabhu <sprabhu@redhat.com>
Reported-by: Jian Li <jiali@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| fs/nfs/nfs4proc.c | diffblobblamehistory |