diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2014-04-25 00:49:13 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2014-04-25 15:08:45 -0700 |
| commit | 2e5ed7fdfb23566cc3d85ce028b2f446c7bf057b (patch) | |
| tree | bba27ad4a740dbbf1799b567c93b771d1977f126 /include/uapi/linux/string.h | |
| parent | cad7aa13a34dc83daa95ae5f9deca794021b4a2a (diff) | |
staging: lustre: improve length checks in ioctls
We copy "hdr->ioc_len" from the user twice but we only verify that it's
within the limit on the first copy. Otherwise we could read unmapped
memory and Oops.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Peng Tao <bergwolf@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'include/uapi/linux/string.h')
0 files changed, 0 insertions, 0 deletions