[PATCH] NFS: Check lengths more thoroughly in NFS4 readdir XDR decode

Thu Aug 24 11:20:59 EDT 2006

On Tue, 2006-08-22 at 17:19 +0100, David Howells wrote:
> Check the bounds of length specifiers more thoroughly in the XDR decoding of
> NFS4 readdir reply data.

Hmm... Your patch fails to check for buffer overflows on the read of the
bitmap/attribute length, and on the end-of-record markers. The attached
slightly revamped patch corrects those oversights.

Cheers,
  Trond
-------------- next part --------------
An embedded message was scrubbed...
From: David Howells <dhowells at redhat.com>
Subject: No Subject
Date: Thu, 24 Aug 2006 11:20:51 -0400
Size: 3610
Url: http://linux-nfs.org/pipermail/nfsv4/attachments/20060824/f767c8e5/linux-2.6.18-069-check_lengths_in_nfs4_readdir_xdr_decode.eml