| commit | 32852a81bccd9e3d1953b894966393d1b546576d | [log] [tgz] |
|---|---|---|
| author | Xi Wang <xi.wang@gmail.com> | Sat Jan 14 22:20:59 2012 -0500 |
| committer | Sage Weil <sage@newdream.net> | Thu Feb 02 12:49:11 2012 -0800 |
| tree | 8c21ce9f1a1e6ecfbeafdcc8552b77b3587bca5b | |
| parent | ab434b60ab07f8c44246b6fb0cddee436687a09a [diff] |
ceph: fix length validation in parse_reply_info() "len" is read from network and thus needs validation. Otherwise, given a bogus "len" value, p+len could be an out-of-bounds pointer, which is used in further parsing. Signed-off-by: Xi Wang <xi.wang@gmail.com> Signed-off-by: Sage Weil <sage@newdream.net>