]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f9bb4b7) | patch
fuse: handle zero sized retrieve correctly
authorMiklos Szeredi <mszeredi@redhat.com>
Wed, 16 Jan 2019 09:27:59 +0000 (10:27 +0100)
committerMiklos Szeredi <mszeredi@redhat.com>
Wed, 16 Jan 2019 09:27:59 +0000 (10:27 +0100)
commit91cdb09bdab45bf0c5f9899f9b454c8acfef66b3
tree9ad35e3d53bdb69e4e6137dac919b8ae2ee07936tree | snapshot
parentf9bb4b753eb00c02014e4467a28609f4f6ac7f88commit | diff
fuse: handle zero sized retrieve correctly

Dereferencing req->page_descs[0] will Oops if req->max_pages is zero.

Reported-by: syzbot+c1e36d30ee3416289cc0@syzkaller.appspotmail.com
Tested-by: syzbot+c1e36d30ee3416289cc0@syzkaller.appspotmail.com
Fixes: 08573b6ecc0c ("fuse: add per-page descriptor <offset, length> to fuse_req")
Cc: <stable@vger.kernel.org> # v3.9
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
fs/fuse/dev.c diff | blob | history
Linux Kernel Source Tree.