Page MenuHomeFreeBSD
Files F160198287

D53368.id165129.diff
No OneTemporary
Actions

D53368.id165129.diff
View Options

diff --git a/sys/fs/nfsclient/nfs_clrpcops.c.shit3 b/sys/fs/nfsclient/nfs_clrpcops.c
--- a/sys/fs/nfsclient/nfs_clrpcops.c.shit3
+++ b/sys/fs/nfsclient/nfs_clrpcops.c
@@ -2212,7 +2212,7 @@
NFSM_DISSECT(tl, u_int32_t *, 2 * NFSX_UNSIGNED
+ NFSX_VERF);
rlen = fxdr_unsigned(int, *tl++);
- if (rlen == 0) {
+ if (rlen <= 0 || rlen > len) {
error = NFSERR_IO;
goto nfsmout;
} else if (rlen < len) {
@@ -7257,7 +7257,7 @@
NFSM_DISSECT(tl, uint32_t *, 2 * NFSX_UNSIGNED + NFSX_VERF);
rlen = fxdr_unsigned(int, *tl++);
NFSCL_DEBUG(4, "nfsrpc_writeds: len=%d rlen=%d\n", len, rlen);
- if (rlen == 0) {
+ if (rlen <= 0 || rlen > len) {
error = NFSERR_IO;
goto nfsmout;
} else if (rlen < len) {

File Metadata

Mime Type
text/plain
Expires
Tue, Jun 23, 2:41 AM (1 h, 21 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
34226354
Default Alt Text
D53368.id165129.diff (747 B)

Event Timeline