projects / linux-2.6-microblaze.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bfeffd1) | patch
fuse: handle zero sized retrieve correctly
authorMiklos Szeredi <mszeredi@redhat.com>
Wed, 16 Jan 2019 09:27:59 +0000 (10:27 +0100)
committerMiklos Szeredi <mszeredi@redhat.com>
Wed, 16 Jan 2019 09:27:59 +0000 (10:27 +0100)
commit97e1532ef81acb31c30f9e75bf00306c33a77812
tree9ad35e3d53bdb69e4e6137dac919b8ae2ee07936tree | snapshot
parentbfeffd155283772bbe78c6a05dec7c0128ee500ccommit | diff
fuse: handle zero sized retrieve correctly

Dereferencing req->page_descs[0] will Oops if req->max_pages is zero.

Reported-by: syzbot+c1e36d30ee3416289cc0@syzkaller.appspotmail.com
Tested-by: syzbot+c1e36d30ee3416289cc0@syzkaller.appspotmail.com
Fixes: b2430d7567a3 ("fuse: add per-page descriptor <offset, length> to fuse_req")
Cc: <stable@vger.kernel.org> # v3.9
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
fs/fuse/dev.c diff | blob | history
MicroBlaze GIT Repository