]> www.infradead.org Git - users/jedix/linux-maple.git/commit
Avoid beyond bounds copy while caching ACL
authorSachin Prabhu <sprabhu@redhat.com>
Tue, 17 Apr 2012 13:36:40 +0000 (14:36 +0100)
committerMaxim Uvarov <maxim.uvarov@oracle.com>
Wed, 19 Dec 2012 12:42:05 +0000 (04:42 -0800)
commitc85fc9c2d92cca5c01315a7b0dd32ea20054ede6
tree1b5da7d16f573b90591783c458cfe02ac4ecb880
parent33afe7552110674b9fab270af0bdfe79d06e5503
Avoid beyond bounds copy while caching ACL

Bug-db: 14798
CVE: CVE-2012-2375
(mainline commit 5a00689930ab975fdd1b37b034475017e460cf2a)
When attempting to cache ACLs returned from the server, if the bitmap
size + the ACL size is greater than a PAGE_SIZE but the ACL size itself
is smaller than a PAGE_SIZE, we can read past the buffer page boundary.

Signed-off-by: Sachin Prabhu <sprabhu@redhat.com>
Reported-by: Jian Li <jiali@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
Conflicts:
fs/nfs/nfs4xdr.c
fs/nfs/nfs4proc.c