Miklos Szeredi 4ca4e81680 fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message ...

commit c2183d1e9b3f313dd8ba2b1b0197c8d9fb86a7ae upstream.

FUSE_NOTIFY_INVAL_ENTRY didn't check the length of the write so the
message processing could overrun and result in a "kernel BUG at
fs/fuse/dev.c:629!"

Reported-by: Han-Wen Nienhuys <hanwenn@gmail.com>
Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2011-08-29 13:29:15 -07:00

..

control.c

convert get_sb_single() users

2010-10-29 04:16:28 -04:00

cuse.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse

2011-03-22 10:42:43 -07:00

dev.c

fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message

2011-08-29 13:29:15 -07:00

dir.c

fuse: remove unnecessary dentry_unhash on rmdir, dir rename

2011-05-28 01:02:53 -04:00

file.c

Fix common misspellings

2011-03-31 11:26:23 -03:00

fuse_i.h

fuse: reduce size of struct fuse_request

2011-03-21 13:58:05 +01:00

inode.c

more conservative S_NOSEC handling

2011-06-03 18:24:58 -04:00

Kconfig

…

Makefile

CUSE: implement CUSE - Character device in Userspace

2009-06-09 11:24:11 +02:00