xfs: don't crash the vfs on a garbage inline symlink
authorDarrick J. Wong <darrick.wong@oracle.com>
Sat, 29 Sep 2018 03:40:40 +0000 (13:40 +1000)
committerDave Chinner <david@fromorbit.com>
Sat, 29 Sep 2018 03:40:40 +0000 (13:40 +1000)
commitae29478766f4c8e16edca6fe1e25d73c47991ebe
tree0e37ce3de3e13f7a2f3c1e00651c25905c70fac6
parent5b394b2ddf0347bef56e50c69a58773c94343ff3
xfs: don't crash the vfs on a garbage inline symlink

The VFS routine that calls ->get_link blindly copies whatever's returned
into the user's buffer.  If we return a NULL pointer, the vfs will
crash on the null pointer.  Therefore, return -EFSCORRUPTED instead of
blowing up the kernel.

[dgc: clean up with hch's suggestions]

Reported-by: wen.xu@gatech.edu
Signed-off-by: Darrick J. Wong <darrick.wong@oracle.com>
Reviewed-by: Allison Henderson <allison.henderson@oracle.com>
Signed-off-by: Dave Chinner <david@fromorbit.com>
fs/xfs/xfs_iops.c