summaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
authorEric Sandeen <sandeen@redhat.com>2017-01-17 11:43:38 -0800
committerDarrick J. Wong <darrick.wong@oracle.com>2017-01-17 11:43:38 -0800
commit657bdfb7f5e68ca5e2ed009ab473c429b0d6af85 (patch)
tree29ed1abcffe747d94c6e26959eed1aaf320c5755 /security
parenta324cbf10a3c67aaa10c9f47f7b5801562925bc2 (diff)
xfs: don't wrap ID in xfs_dq_get_next_idxfs-for-linus-4.10-rc5
The GETNEXTQOTA ioctl takes whatever ID is sent in, and looks for the next active quota for an user equal or higher to that ID. But if we are at the maximum ID and then ask for the "next" one, we may wrap back to zero. In this case, userspace may loop forever, because it will start querying again at zero. We'll fix this in userspace as well, but for the kernel, return -ENOENT if we ask for the next quota ID past UINT_MAX so the caller knows to stop. Signed-off-by: Eric Sandeen <sandeen@redhat.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Darrick J. Wong <darrick.wong@oracle.com> Signed-off-by: Darrick J. Wong <darrick.wong@oracle.com>
Diffstat (limited to 'security')
0 files changed, 0 insertions, 0 deletions