kevin/linux
1
Fork 0
Code
ed9e198234
linux/fs/nfsd
History
J. Bruce Fields 91b80969ba nfsd: fix buffer overrun decoding NFSv4 acl 
The array we kmalloc() here is not large enough.

Thanks to Johann Dahm and David Richter for bug report and testing.

Signed-off-by: J. Bruce Fields <bfields@citi.umich.edu>
Cc: David Richter <richterd@citi.umich.edu>
Tested-by: Johann Dahm <jdahm@umich.edu>
2008-09-01 14:24:24 -04:00
..
auth.c nfsd: fix sparse warnings 2008-04-23 16:13:39 -04:00
auth.h nfsd: minor fs/nfsd/auth.h cleanup 2008-02-01 16:42:05 -05:00
export.c fs/nfsd/export.c: Adjust error handling code involving auth_domain_put 2008-07-30 13:20:20 -04:00
lockd.c lockd: dont return EAGAIN for a permanent error 2008-07-25 10:53:47 -07:00
Makefile
nfs2acl.c nfsd: rename MAY_ flags 2008-06-23 13:02:50 -04:00
nfs3acl.c nfsd: rename MAY_ flags 2008-06-23 13:02:50 -04:00
nfs3proc.c nfsd: rename MAY_ flags 2008-06-23 13:02:50 -04:00
nfs3xdr.c Use struct path in struct svc_export 2008-02-14 21:17:08 -08:00
nfs4acl.c nfsd: fix buffer overrun decoding NFSv4 acl 2008-09-01 14:24:24 -04:00
nfs4callback.c rpc: bring back cl_chatty 2008-07-09 12:09:10 -04:00
nfs4idmap.c nfsd: fix sparse warnings 2008-04-23 16:13:39 -04:00
nfs4proc.c nfsd: fix compound state allocation error handling 2008-09-01 14:17:48 -04:00
nfs4recover.c [PATCH] r/o bind mounts: get callers of vfs_mknod/create/mkdir() 2008-04-19 00:25:34 -04:00
nfs4state.c nfsd: take file and mnt write in nfs4_upgrade_open 2008-07-07 15:23:34 -04:00
nfs4xdr.c nfsd: nfs4xdr.c do-while is not a compound statement 2008-07-18 15:18:35 -04:00
nfscache.c
nfsctl.c [PATCH] get rid of indirect users of namei.h 2008-07-26 20:53:42 -04:00
nfsfh.c [PATCH] kill nameidata passing to permission(), rename to inode_permission() 2008-07-26 20:53:31 -04:00
nfsproc.c nfsd: rename MAY_ flags 2008-06-23 13:02:50 -04:00
nfssvc.c nfsd: treat all shutdown signals as equivalent 2008-06-30 15:27:47 -04:00
nfsxdr.c Use struct path in struct svc_export 2008-02-14 21:17:08 -08:00
stats.c
vfs.c [PATCH] kill nameidata passing to permission(), rename to inode_permission() 2008-07-26 20:53:31 -04:00