Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit fa8b18ed authored Nov 20, 2011 by Christoph Hellwig Committed by Ben Myers Nov 28, 2011

xfs: validate acl count



This prevents in-memory corruption and possible panics if the on-disk
ACL is badly corrupted.

Signed-off-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Ben Myers <bpm@sgi.com>

parent c8891329

fs/xfs/xfs_acl.c

+2 −0

Original line number	Original line	Diff line number	Diff line
	@@ -42,6 +42,8 @@ xfs_acl_from_disk(struct xfs_acl *aclp)
	int count, i;		int count, i;

	count = be32_to_cpu(aclp->acl_cnt);		count = be32_to_cpu(aclp->acl_cnt);
			if (count > XFS_ACL_MAX_ENTRIES)
			return ERR_PTR(-EFSCORRUPTED);

	acl = posix_acl_alloc(count, GFP_KERNEL);		acl = posix_acl_alloc(count, GFP_KERNEL);
	if (!acl)		if (!acl)