Gertjan Halkes fdf0c593ec 9p: do not trust pdu content for stat item size ...

[ Upstream commit 2803cf4379 ]

v9fs_dir_readdir() could deadloop if a struct was sent with a size set
to -2

Link: http://lkml.kernel.org/r/1536134432-11997-1-git-send-email-asmadeus@codewreck.org
Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=88021
Signed-off-by: Gertjan Halkes <gertjan@google.com>
Signed-off-by: Dominique Martinet <dominique.martinet@cea.fr>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2019-04-20 09:15:04 +02:00

..

client.c

9p/net: fix memory leak in p9_client_create

2019-03-23 14:35:09 +01:00

error.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

Kconfig

xen/9pfs: select CONFIG_XEN_XENBUS_FRONTEND

2017-05-02 11:14:36 +02:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

mod.c

9p: Reduce object size with CONFIG_NET_9P_DEBUG

2012-01-05 10:51:44 -06:00

protocol.c

9p: do not trust pdu content for stat item size

2019-04-20 09:15:04 +02:00

protocol.h

net/9p: Convert net/9p protocol dumps to tracepoints

2011-10-24 11:13:12 -05:00

trans_common.c

net/9p: remove (now-)unused helpers

2015-04-11 22:28:29 -04:00

trans_common.h

net/9p: remove (now-)unused helpers

2015-04-11 22:28:29 -04:00

trans_fd.c

net/9p/trans_fd.c: fix race by holding the lock

2018-09-15 09:45:29 +02:00

trans_rdma.c

9p: fix multiple NULL-pointer-dereferences

2018-09-09 19:55:55 +02:00

trans_virtio.c

net/9p: fix error path of p9_virtio_probe

2018-09-15 09:45:29 +02:00

trans_xen.c

9p: fix multiple NULL-pointer-dereferences

2018-09-09 19:55:55 +02:00

util.c

net/9p: convert to idr_alloc()

2013-02-27 19:10:20 -08:00