]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e06505b) | patch
ceph: fix length validation in parse_reply_info()
authorXi Wang <xi.wang@gmail.com>
Sun, 15 Jan 2012 03:20:59 +0000 (22:20 -0500)
committerSage Weil <sage@newdream.net>
Thu, 2 Feb 2012 20:49:11 +0000 (12:49 -0800)
commit2e7bae3ba961401b8b948b6e8b449d5b8f3faf71
tree8c21ce9f1a1e6ecfbeafdcc8552b77b3587bca5btree | snapshot
parente06505bc218e9f1d2cfc87f8d4719ad9e83e3219commit | diff
ceph: fix length validation in parse_reply_info()

"len" is read from network and thus needs validation.  Otherwise, given
a bogus "len" value, p+len could be an out-of-bounds pointer, which is
used in further parsing.

Signed-off-by: Xi Wang <xi.wang@gmail.com>
Signed-off-by: Sage Weil <sage@newdream.net>
fs/ceph/mds_client.c diff | blob | history
Linux Kernel Source Tree.