Miklos Szeredi 266a69895b fuse: handle zero sized retrieve correctly ...

commit 97e1532ef81acb31c30f9e75bf00306c33a77812 upstream.

Dereferencing req->page_descs[0] will Oops if req->max_pages is zero.

Reported-by: syzbot+c1e36d30ee3416289cc0@syzkaller.appspotmail.com
Tested-by: syzbot+c1e36d30ee3416289cc0@syzkaller.appspotmail.com
Fixes: b2430d7567a3 ("fuse: add per-page descriptor <offset, length> to fuse_req")
Cc: <stable@vger.kernel.org> # v3.9
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-02-12 19:46:11 +01:00

..

acl.c

fuse: Add posix ACL support

2016-10-01 07:32:32 +02:00

control.c

fuse: fix control dir setup and teardown

2018-07-03 11:24:49 +02:00

cuse.c

fuse: honor iocb sync flags on write

2017-09-12 16:57:53 +02:00

dev.c

fuse: handle zero sized retrieve correctly

2019-02-12 19:46:11 +01:00

dir.c

fuse: continue to send FUSE_RELEASEDIR when FUSE_OPEN returns ENOSYS

2018-12-21 14:13:05 +01:00

file.c

fuse: decrement NR_WRITEBACK_TEMP on the right page

2019-02-12 19:46:11 +01:00

fuse_i.h

fuse: continue to send FUSE_RELEASEDIR when FUSE_OPEN returns ENOSYS

2018-12-21 14:13:05 +01:00

inode.c

fuse: Fix oops at process_init_reply()

2018-09-05 09:26:38 +02:00

Kconfig

fuse: Add posix ACL support

2016-10-01 07:32:32 +02:00

Makefile

fuse: Use generic xattr ops

2016-10-01 07:32:32 +02:00

xattr.c

fuse: limit xattr returned size

2016-10-03 11:06:05 +02:00