Miklos Szeredi 266a69895b fuse: handle zero sized retrieve correctly
commit 97e1532ef81acb31c30f9e75bf00306c33a77812 upstream.

Dereferencing req->page_descs[0] will Oops if req->max_pages is zero.

Reported-by: syzbot+c1e36d30ee3416289cc0@syzkaller.appspotmail.com
Tested-by: syzbot+c1e36d30ee3416289cc0@syzkaller.appspotmail.com
Fixes: b2430d7567a3 ("fuse: add per-page descriptor <offset, length> to fuse_req")
Cc: <stable@vger.kernel.org> # v3.9
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-02-12 19:46:11 +01:00
..
2018-07-08 15:30:51 +02:00
2018-07-17 11:39:26 +02:00
2018-12-05 19:41:25 +01:00
2018-12-17 09:28:54 +01:00
2019-02-12 19:46:09 +01:00
2019-02-12 19:46:03 +01:00
2018-12-21 14:13:04 +01:00
2017-09-04 19:05:15 -04:00
2018-05-16 10:10:25 +02:00