Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 20e0fa98 authored by Sachin Prabhu's avatar Sachin Prabhu Committed by Trond Myklebust
Browse files

Fix length of buffer copied in __nfs4_get_acl_uncached 



_copy_from_pages() used to copy data from the temporary buffer to the
user passed buffer is passed the wrong size parameter when copying
data. res.acl_len contains both the bitmap and acl lenghts while
acl_len contains the acl length after adjusting for the bitmap size.

Signed-off-by: default avatarSachin Prabhu <sprabhu@redhat.com>
Signed-off-by: default avatarTrond Myklebust <Trond.Myklebust@netapp.com>
parent 250f6715

fs/nfs/nfs4proc.c

+1 −1
Original line number Diff line number Diff line
@@ -3712,7 +3712,7 @@ static ssize_t __nfs4_get_acl_uncached(struct inode *inode, void *buf, size_t bu 
		if (acl_len > buflen)

			goto out_free;

		_copy_from_pages(buf, pages, res.acl_data_offset,

				res.acl_len);

				acl_len);

	}

	ret = acl_len;

out_free: