Commit fa8b18ed authored Nov 20, 2011 by Christoph Hellwig Committed by Ben Myers Nov 28, 2011

xfs: validate acl count



This prevents in-memory corruption and possible panics if the on-disk
ACL is badly corrupted.

Signed-off-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Ben Myers <bpm@sgi.com>

parent c8891329

fs/xfs/xfs_acl.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -42,6 +42,8 @@ xfs_acl_from_disk(struct xfs_acl *aclp)
		int count, i;

		count = be32_to_cpu(aclp->acl_cnt);
		if (count > XFS_ACL_MAX_ENTRIES)
		return ERR_PTR(-EFSCORRUPTED);

		acl = posix_acl_alloc(count, GFP_KERNEL);
		if (!acl)