jimzah/openafs
1
0
Fork 0
mirror of https://git.openafs.org/openafs.git synced 2025-01-18 15:00:12 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

afs: Use correct output buffer for FSCmd pioctl

Browse Source 
MRAFS added the FsCmd pioctl for passing messages to the fileserver;
a bug causes it to write into the wrong memory and potentially panic
clients.

FIXES 131896 (CVE-2015-3285)

Change-Id: Ic3a81fe06edc886f24bbc0537ea53e994b086c9e
This commit is contained in:
Andrew Deason 2015-07-08 14:20:13 -04:00 committed by Daria Brashear
parent 592a99d6e6
commit ef671f497e
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/afs/afs_pioctl.c
View File

@ -5065,8 +5065,7 @@ DECL_PIOCTL(PFsCmd)
if (tc) {
RX_AFS_GUNLOCK();
code =
RXAFS_FsCmd(rxconn, Fid, Inputs,
(struct FsCmdOutputs *)aout);
RXAFS_FsCmd(rxconn, Fid, Inputs, Outputs);
RX_AFS_GLOCK();
} else
code = -1;