diff options
| author | Dan Carpenter <dancarpenter@oracle.com> | 2021-02-17 09:04:34 +0300 |
|---|---|---|
| committer | David Sterba <dsterba@suse.com> | 2021-03-02 16:55:47 +0100 |
| commit | 5011c5a663b9c6d6aff3d394f11049b371199627 (patch) | |
| tree | 30158953f67cebabb9db0535a9c37e1c0f4c03f5 /fs/btrfs/super.c | |
| parent | 4f6a49de64fd1b1dba5229c02047376da7cf24fd (diff) | |
| download | linux-5011c5a663b9c6d6aff3d394f11049b371199627.tar.bz2 | |
btrfs: validate qgroup inherit for SNAP_CREATE_V2 ioctl
The problem is we're copying "inherit" from user space but we don't
necessarily know that we're copying enough data for a 64 byte
struct. Then the next problem is that 'inherit' has a variable size
array at the end, and we have to verify that array is the size we
expected.
Fixes: 6f72c7e20dba ("Btrfs: add qgroup inheritance")
CC: stable@vger.kernel.org # 4.4+
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Diffstat (limited to 'fs/btrfs/super.c')
0 files changed, 0 insertions, 0 deletions