diff options
| author |   Scott Mayhew <smayhew@redhat.com> | 2018-05-07 09:01:08 -0400 |
|---|---|---|
| committer |   J. Bruce Fields <bfields@redhat.com> | 2018-05-07 13:00:48 -0400 |
| commit | 9c2ece6ef67e9d376f32823086169b489c422ed0 (patch) | |
| tree | c5c1af2bae5d17037d0373bd50647b4dad5198b1 /include/linux/debugobjects.h | |
| parent | Linux 4.17-rc4 (diff) | |
nfsd: restrict rd_maxcount to svc_max_payload in nfsd_encode_readdir
nfsd4_readdir_rsize restricts rd_maxcount to svc_max_payload when
estimating the size of the readdir reply, but nfsd_encode_readdir
restricts it to INT_MAX when encoding the reply. This can result in log
messages like "kernel: RPC request reserved 32896 but used 1049444".
Restrict rd_dircount similarly (no reason it should be larger than
svc_max_payload).
Signed-off-by: Scott Mayhew <smayhew@redhat.com>
Cc: stable@vger.kernel.org
Signed-off-by: J. Bruce Fields <bfields@redhat.com>
Diffstat (limited to 'include/linux/debugobjects.h')
0 files changed, 0 insertions, 0 deletions