staging: lustre: improve length checks in ioctls

Browse source

We copy "hdr->ioc_len" from the user twice but we only verify that it's
within the limit on the first copy.  Otherwise we could read unmapped
memory and Oops.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Peng Tao <bergwolf@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

...

This commit is contained in:

Dan Carpenter 2014-04-25 00:49:13 +03:00 • committed by Greg Kroah-Hartman

parent cad7aa13a3

commit 2e5ed7fdfb

2 changed files with 6 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

drivers/staging/lustre/lustre/libcfs/linux/linux-module.c

View file

2

drivers/staging/lustre/lustre/obdclass/linux/linux-module.c

View file