]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message
authorMiklos Szeredi <mszeredi@suse.cz>
Wed, 24 Aug 2011 08:20:17 +0000 (10:20 +0200)
committerGreg Kroah-Hartman <gregkh@suse.de>
Mon, 29 Aug 2011 21:33:03 +0000 (14:33 -0700)
commit54535f716d3f635179a8033a8dab6306ef5cb90e
treebd4f3403ca8c696dbc8937b9ff568f22b51f61ec
parentaf0f7f669e9cb671422111246d71c37f5d18252c
fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message

commit c2183d1e9b3f313dd8ba2b1b0197c8d9fb86a7ae upstream.

FUSE_NOTIFY_INVAL_ENTRY didn't check the length of the write so the
message processing could overrun and result in a "kernel BUG at
fs/fuse/dev.c:629!"

Reported-by: Han-Wen Nienhuys <hanwenn@gmail.com>
Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
fs/fuse/dev.c