From: Christian Brauner Date: Fri, 12 Sep 2025 11:52:26 +0000 (+0200) Subject: nsfs: validate extensible ioctls X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=f8527a29f4619f74bc30a9845ea87abb9a6faa1e;p=thirdparty%2Fkernel%2Fstable.git nsfs: validate extensible ioctls Validate extensible ioctls stricter than we do now. Reviewed-by: Jan Kara Signed-off-by: Christian Brauner --- diff --git a/fs/nsfs.c b/fs/nsfs.c index ce51041bb6243..d016d36272d49 100644 --- a/fs/nsfs.c +++ b/fs/nsfs.c @@ -169,9 +169,11 @@ static bool nsfs_ioctl_valid(unsigned int cmd) /* Extensible ioctls require some extra handling. */ switch (_IOC_NR(cmd)) { case _IOC_NR(NS_MNT_GET_INFO): + return extensible_ioctl_valid(cmd, NS_MNT_GET_INFO, MNT_NS_INFO_SIZE_VER0); case _IOC_NR(NS_MNT_GET_NEXT): + return extensible_ioctl_valid(cmd, NS_MNT_GET_NEXT, MNT_NS_INFO_SIZE_VER0); case _IOC_NR(NS_MNT_GET_PREV): - return (_IOC_TYPE(cmd) == _IOC_TYPE(cmd)); + return extensible_ioctl_valid(cmd, NS_MNT_GET_PREV, MNT_NS_INFO_SIZE_VER0); } return false;