Dan Carpenter 071c529eb6 xfs: underflow bug in xfs_attrlist_by_handle()
If we allocate less than sizeof(struct attrlist) then we end up
corrupting memory or doing a ZERO_PTR_SIZE dereference.

This can only be triggered with CAP_SYS_ADMIN.

Reported-by: Nico Golde <nico@ngolde.de>
Reported-by: Fabian Yamaguchi <fabs@goesec.de>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Dave Chinner <dchinner@redhat.com>
Signed-off-by: Ben Myers <bpm@sgi.com>
2013-12-04 14:23:46 -06:00
..
2013-05-07 18:45:36 -05:00
2013-11-06 16:31:27 -06:00
2013-11-06 16:31:27 -06:00
2013-05-07 18:45:36 -05:00
2012-11-19 20:11:24 -06:00
2013-08-12 16:53:39 -05:00
2012-11-19 20:11:24 -06:00
2013-09-12 16:13:41 -07:00
2012-05-14 16:20:54 -05:00
2013-08-12 16:56:06 -05:00
2013-11-06 12:41:51 -06:00
2013-05-07 18:45:36 -05:00
2013-11-14 17:16:35 +09:00
2012-10-17 12:01:25 -05:00
2013-11-06 12:41:51 -06:00
2013-12-04 14:11:05 -06:00
2013-05-07 18:45:36 -05:00