fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message
authorMiklos Szeredi <mszeredi@suse.cz>
Wed, 24 Aug 2011 08:20:17 +0000 (10:20 +0200)
committerMiklos Szeredi <mszeredi@suse.cz>
Wed, 24 Aug 2011 08:20:17 +0000 (10:20 +0200)
commitc2183d1e9b3f313dd8ba2b1b0197c8d9fb86a7ae
treefd9e12ce069012b60e5bdcd15627ccf4912d9ef1
parent478e0841b3dce3edc2c67bf0fc51af30f582e9e2
fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message

FUSE_NOTIFY_INVAL_ENTRY didn't check the length of the write so the
message processing could overrun and result in a "kernel BUG at
fs/fuse/dev.c:629!"

Reported-by: Han-Wen Nienhuys <hanwenn@gmail.com>
Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
CC: stable@kernel.org
fs/fuse/dev.c