orangefs: fix bounds check for listxattr

commit a956af337b9ff25822d9ce1a59c6ed0c09fc14b9 upstream.

Signed-off-by: Martin Brandenburg <martin@omnibond.com>
Signed-off-by: Mike Marshall <hubcap@omnibond.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

diff --git a/fs/orangefs/xattr.c b/fs/orangefs/xattr.c
index 74a81b1daaac8850b68f37bc46110657082dfcc1..fba4db7d0512c59087101412d2234fb7acaa61ae 100644 (file)
--- a/fs/orangefs/xattr.c
+++ b/fs/orangefs/xattr.c
@@ -358,7 +358,7 @@ try_again:
 
        returned_count = new_op->downcall.resp.listxattr.returned_count;
        if (returned_count < 0 ||
-           returned_count >= ORANGEFS_MAX_XATTR_LISTLEN) {
+           returned_count > ORANGEFS_MAX_XATTR_LISTLEN) {
                gossip_err("%s: impossible value for returned_count:%d:\n",
                __func__,
                returned_count);