| commit | 071c529eb672648ee8ca3f90944bcbcc730b4c06 | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Thu Oct 31 21:00:10 2013 +0300 |
| committer | Ben Myers <bpm@sgi.com> | Wed Dec 04 14:23:46 2013 -0600 |
| tree | cd7b38fd97a14db125f3181131c31fda84f2690a | |
| parent | f23007784570278ca5963c35d5b3847d710ed695 [diff] |
xfs: underflow bug in xfs_attrlist_by_handle() If we allocate less than sizeof(struct attrlist) then we end up corrupting memory or doing a ZERO_PTR_SIZE dereference. This can only be triggered with CAP_SYS_ADMIN. Reported-by: Nico Golde <nico@ngolde.de> Reported-by: Fabian Yamaguchi <fabs@goesec.de> Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Reviewed-by: Dave Chinner <dchinner@redhat.com> Signed-off-by: Ben Myers <bpm@sgi.com>