Avoid beyond bounds copy while caching ACL
authorSachin Prabhu <sprabhu@redhat.com>
Tue, 17 Apr 2012 13:36:40 +0000 (14:36 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Wed, 30 May 2012 23:44:06 +0000 (00:44 +0100)
commitb7d52ac86a9753520a696af25d333e3451eeae92
treee4f764b5561ad70a8e219b216c2e437665e212f3
parent84e017e3ff4113a32c827f2d7f96e1a9b1f7a677
Avoid beyond bounds copy while caching ACL

commit 5794d21ef4639f0e33440927bb903f9598c21e92 upstream.

When attempting to cache ACLs returned from the server, if the bitmap
size + the ACL size is greater than a PAGE_SIZE but the ACL size itself
is smaller than a PAGE_SIZE, we can read past the buffer page boundary.

Signed-off-by: Sachin Prabhu <sprabhu@redhat.com>
Reported-by: Jian Li <jiali@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
fs/nfs/nfs4proc.c
fs/nfs/nfs4xdr.c