Commit 6d8d1749 authored Jan 18, 2012 by Dan Carpenter Committed by J. Bruce Fields Feb 03, 2012

nfsd: don't allow zero length strings in cache_parse()



There is no point in passing a zero length string here and quite a
few of that cache_parse() implementations will Oops if count is
zero.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: stable@kernel.org
Signed-off-by: J. Bruce Fields <bfields@redhat.com>

parent 62aa2b53

net/sunrpc/cache.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -828,6 +828,8 @@ static ssize_t cache_do_downcall(char kaddr, const char __user buf,
		{
		ssize_t ret;

		if (count == 0)
		return -EINVAL;
		if (copy_from_user(kaddr, buf, count))
		return -EFAULT;
		kaddr[count] = '\0';