Bernd Edlinger 39bd6a7496 kernfs: Fix range checks in kernfs_get_target_path ... [ Upstream commit a75e78f21f9ad4b810868c89dbbabcc3931591ca ] The terminating NUL byte is only there because the buffer is allocated with kzalloc(PAGE_SIZE, GFP_KERNEL), but since the range-check is off-by-one, and PAGE_SIZE==PATH_MAX, the returned string may not be zero-terminated if it is exactly PATH_MAX characters long. Furthermore also the initial loop may theoretically exceed PATH_MAX and cause a fault. Signed-off-by: Bernd Edlinger <bernd.edlinger@hotmail.de> Acked-by: Tejun Heo <tj@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2019-11-25 15:53:59 +01:00
..
dir.c	kernfs: implement kernfs_path_len()	2015-08-18 15:49:15 -07:00
file.c	kernfs: fix regression in kernfs_fop_write caused by wrong type	2018-02-16 20:09:42 +01:00
inode.c	kernfs: Add support for always empty directories.	2015-07-01 10:36:43 -05:00
Kconfig
kernfs-internal.h
Makefile
mount.c
symlink.c	kernfs: Fix range checks in kernfs_get_target_path	2019-11-25 15:53:59 +01:00