| From f39af05adb039cffab3aa1960ea5f23cbe227ded Mon Sep 17 00:00:00 2001 |
| From: Martin Brandenburg <martin@omnibond.com> |
| Date: Tue, 25 Apr 2017 15:37:56 -0400 |
| Subject: [PATCH] orangefs: fix bounds check for listxattr |
| |
| commit a956af337b9ff25822d9ce1a59c6ed0c09fc14b9 upstream. |
| |
| Signed-off-by: Martin Brandenburg <martin@omnibond.com> |
| Cc: stable@vger.kernel.org |
| Signed-off-by: Mike Marshall <hubcap@omnibond.com> |
| Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com> |
| |
| diff --git a/fs/orangefs/xattr.c b/fs/orangefs/xattr.c |
| index 2a9f07f06d10..996698a60ca7 100644 |
| --- a/fs/orangefs/xattr.c |
| +++ b/fs/orangefs/xattr.c |
| @@ -355,7 +355,7 @@ try_again: |
| |
| returned_count = new_op->downcall.resp.listxattr.returned_count; |
| if (returned_count < 0 || |
| - returned_count >= ORANGEFS_MAX_XATTR_LISTLEN) { |
| + returned_count > ORANGEFS_MAX_XATTR_LISTLEN) { |
| gossip_err("%s: impossible value for returned_count:%d:\n", |
| __func__, |
| returned_count); |
| -- |
| 2.12.0 |
| |