From: Dan Carpenter <dan.carpenter@oracle.com>
Date: Thu, 24 Apr 2014 21:49:13 +0000 (+0300)
Subject: staging: lustre: improve length checks in ioctls
X-Git-Tag: omap-for-v3.16/fixes-against-rc1~39^2~36^2~1285
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2e5ed7fdfb23566cc3d85ce028b2f446c7bf057b;p=pandora-kernel.git

staging: lustre: improve length checks in ioctls

We copy "hdr->ioc_len" from the user twice but we only verify that it's
within the limit on the first copy.  Otherwise we could read unmapped
memory and Oops.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Peng Tao <bergwolf@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---

Reading git-diff-tree failed