diff options
| author | Marios Makassikis <mmakassikis@freebox.fr> | 2021-05-06 05:40:02 +0300 |
|---|---|---|
| committer | Steve French <stfrench@microsoft.com> | 2021-05-11 03:15:47 +0300 |
| commit | e7735c854880084a6d97e60465f19daa42842eff (patch) | |
| tree | e2978eab92d876060095a65ab514191173749603 /tools/perf/scripts/python/export-to-postgresql.py | |
| parent | 79caa9606df1504b3b5104457cbb5d759f0e5fae (diff) | |
| download | linux-e7735c854880084a6d97e60465f19daa42842eff.tar.xz | |
cifsd: Update out_buf_len in smb2_populate_readdir_entry()
When processing a SMB2 QUERY_DIRECTORY request,
smb2_populate_readdir_entry() is called first to fill the dot/dotdot
entries. This moves the d_info->wptr pointer but out_buf_len remains
unchanged. As a result, reserve_populate_dentry() may end up writing
past the end of the buffer since the bounds checking is done on
invalid values.
Signed-off-by: Marios Makassikis <mmakassikis@freebox.fr>
Signed-off-by: Namjae Jeon <namjae.jeon@samsung.com>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions