J. Bruce Fields d5f50b0c29 nfsd4: fix oops on unusual readlike compound ...

If the argument and reply together exceed the maximum payload size, then
a reply with a read-like operation can overlow the rq_pages array.

Cc: stable@kernel.org
Signed-off-by: J. Bruce Fields <bfields@redhat.com>

2012-12-17 21:55:21 -05:00

..

acl.h

nfsd4: remove outdated pathname-comments

2011-01-04 18:22:10 -05:00

auth.c

Merge branch 'for-3.5' of git://linux-nfs.org/~bfields/linux

2012-06-01 08:32:58 -07:00

auth.h

…

cache.h

nfsd: turn on reply cache for NFSv4

2011-07-18 09:39:01 -04:00

current_stateid.h

nfsd41: use current stateid by value

2012-02-15 11:20:45 -05:00

export.c

SUNRPC: service request network namespace helper introduced

2012-07-27 16:49:21 -04:00

fault_inject.c

NFSD: Correct the size calculation in fault_inject_write

2012-12-10 18:24:22 -05:00

idmap.h

nfsd: pass network context to idmap init/exit functions

2012-04-12 09:12:10 -04:00

Kconfig

NFSD: Added fault injection

2011-11-07 21:10:47 -05:00

lockd.c

nfsd: Remove deprecated nfsctl system call and related code.

2011-07-15 18:58:42 -04:00

Makefile

NFSD: Added fault injection

2011-11-07 21:10:47 -05:00

netns.h

nfsd: make NFSd service structure allocated per net

2012-12-10 16:25:39 -05:00

nfs2acl.c

nfsd4: nfsaclsvc_encode_voidres static

2012-08-20 18:39:49 -04:00

nfs3acl.c

…

nfs3proc.c

nfsd: do_nfsd_create verf argument is a u32

2012-08-20 18:39:49 -04:00

nfs3xdr.c

nfsd: make NFSd service boot time per-net

2012-12-10 16:25:38 -05:00

nfs4acl.c

fs: add export.h to files using EXPORT_SYMBOL/THIS_MODULE macros

2011-10-31 19:30:31 -04:00

nfs4callback.c

nfsd: make NFSv4 lease time per net

2012-11-28 10:39:46 -05:00

nfs4idmap.c

NFSD: pass null terminated buf to kstrtouint()

2012-09-10 17:46:19 -04:00

nfs4proc.c

nfsd4: disable zero-copy on non-final read ops

2012-12-17 16:02:41 -05:00

nfs4recover.c

nfsd: make NFSv4 recovery client tracking options per net

2012-12-10 16:25:30 -05:00

nfs4state.c

nfsd4: disable zero-copy on non-final read ops

2012-12-17 16:02:41 -05:00

nfs4xdr.c

nfsd4: fix oops on unusual readlike compound

2012-12-17 21:55:21 -05:00

nfscache.c

nfsd: turn on reply cache for NFSv4

2011-07-18 09:39:01 -04:00

nfsctl.c

nfsd: make NFSd service structure allocated per net

2012-12-10 16:25:39 -05:00

nfsd.h

nfsd: make NFSd service structure allocated per net

2012-12-10 16:25:39 -05:00

nfsfh.c

exportfs: add FILEID_INVALID to indicate invalid fid_type

2012-11-07 19:22:30 -05:00

nfsfh.h

fs: propagate umode_t, misc bits

2012-01-03 22:55:10 -05:00

nfsproc.c

nfsd: Push mnt_want_write() outside of i_mutex

2012-07-31 01:02:51 +04:00

nfssvc.c

nfsd: pass proper net to nfsd_destroy() from NFSd kthreads

2012-12-10 16:25:42 -05:00

nfsxdr.c

Fix common misspellings

2011-03-31 11:26:23 -03:00

state.h

NFSD: Forget state for a specific client

2012-12-03 09:59:03 -05:00

stats.c

SUNRPC: register service stats /proc entries in passed network namespace context

2012-01-31 19:28:18 -05:00

vfs.c

nfsd: avoid permission checks on EXCLUSIVE_CREATE replay

2012-12-10 16:25:31 -05:00

vfs.h

nfsd: Push mnt_want_write() outside of i_mutex

2012-07-31 01:02:51 +04:00

xdr3.h

…

xdr4.h

nfsd4: disable zero-copy on non-final read ops

2012-12-17 16:02:41 -05:00

xdr.h

…