diff options
| author | Jeff Layton <jlayton@redhat.com> | 2011-04-27 19:25:51 +0200 |
|---|---|---|
| committer | Steve French <sfrench@us.ibm.com> | 2011-04-29 06:57:35 +0200 |
| commit | bfacf2225a955bea9c41c707fc72ba16009674a0 (patch) | |
| tree | b164fd09adda6397a46d7a0e2e1438a3b5525d72 /fs/xfs/xfs_trans_buf.c | |
| parent | Merge branch 'drm-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/air... (diff) | |
| download | linux-bfacf2225a955bea9c41c707fc72ba16009674a0.tar.xz linux-bfacf2225a955bea9c41c707fc72ba16009674a0.zip | |
cifs: change bleft in decode_unicode_ssetup back to signed type
The buffer length checks in this function depend on this value being a
signed data type, but 690c522fa converted it to an unsigned type.
Also, eliminate a problem with the null termination check in the same
function. cifs_strndup_from_ucs handles that situation correctly
already, and the existing check could potentially lead to a buffer
overrun since it increments bleft without checking to see whether it
falls off the end of the buffer.
Cc: stable@kernel.org
Reported-and-Acked-by: David Howells <dhowells@redhat.com>
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Signed-off-by: Steve French <sfrench@us.ibm.com>
Diffstat (limited to 'fs/xfs/xfs_trans_buf.c')
0 files changed, 0 insertions, 0 deletions