Miklos Szeredi 64702dea06 fuse: handle zero sized retrieve correctly ...

commit 97e1532ef8 upstream.

Dereferencing req->page_descs[0] will Oops if req->max_pages is zero.

Reported-by: syzbot+c1e36d30ee3416289cc0@syzkaller.appspotmail.com
Tested-by: syzbot+c1e36d30ee3416289cc0@syzkaller.appspotmail.com
Fixes: b2430d7567 ("fuse: add per-page descriptor <offset, length> to fuse_req")
Cc: <stable@vger.kernel.org> # v3.9
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-02-12 19:45:00 +01:00

..

acl.c

fuse: Add posix ACL support

2016-10-01 07:32:32 +02:00

control.c

fuse: fix control dir setup and teardown

2018-07-03 11:23:07 +02:00

cuse.c

fuse: Add reference counting for fuse_io_priv

2016-03-14 15:02:51 +01:00

dev.c

fuse: handle zero sized retrieve correctly

2019-02-12 19:45:00 +01:00

dir.c

fuse: fix initial parallel dirops

2018-09-05 09:20:08 +02:00

file.c

fuse: decrement NR_WRITEBACK_TEMP on the right page

2019-02-12 19:45:00 +01:00

fuse_i.h

fuse: umount should wait for all requests

2018-09-05 09:20:08 +02:00

inode.c

fuse: Fix oops at process_init_reply()

2018-09-05 09:20:08 +02:00

Kconfig

fuse: Add posix ACL support

2016-10-01 07:32:32 +02:00

Makefile

fuse: Use generic xattr ops

2016-10-01 07:32:32 +02:00

xattr.c

fuse: limit xattr returned size

2016-10-03 11:06:05 +02:00