linux/net/9p
Christoph Hellwig af224c2eed net/9p: validate fds in p9_fd_open
[ Upstream commit a39c46067c ]

p9_fd_open just fgets file descriptors passed in from userspace, but
doesn't verify that they are valid for read or writing.  This gets
cought down in the VFS when actually attempting a read or write, but
a new warning added in linux-next upsets syzcaller.

Fix this by just verifying the fds early on.

Link: http://lkml.kernel.org/r/20200710085722.435850-1-hch@lst.de
Reported-by: syzbot+e6f77e16ff68b2434a2c@syzkaller.appspotmail.com
Signed-off-by: Christoph Hellwig <hch@lst.de>
[Dominique: amend goto as per Doug Nazar's review]
Signed-off-by: Dominique Martinet <asmadeus@codewreck.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-08-11 15:32:32 +02:00
..
client.c 9p: Transport error uninitialized 2019-10-11 18:21:12 +02:00
error.c
Kconfig IB: Revert "remove redundant INFINIBAND kconfig dependencies" 2018-05-28 10:40:16 -06:00
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
mod.c 9p: Use a slab for allocating requests 2019-07-03 13:14:41 +02:00
protocol.c 9p: p9dirent_read: check network-provided name length 2019-07-03 13:14:42 +02:00
protocol.h
trans_common.c net/9p: include trans_common.h to fix missing prototype warning. 2019-07-03 13:14:43 +02:00
trans_common.h net/9p: remove (now-)unused helpers 2015-04-11 22:28:29 -04:00
trans_fd.c net/9p: validate fds in p9_fd_open 2020-08-11 15:32:32 +02:00
trans_rdma.c 9p/rdma: remove useless check in cm_event_handler 2019-07-03 13:14:42 +02:00
trans_virtio.c 9p/virtio: Add cleanup path in p9_virtio_init 2019-07-26 09:14:25 +02:00
trans_xen.c 9p/xen: Add cleanup path in p9_trans_xen_init 2019-07-26 09:14:25 +02:00
util.c 9p: fix whitespace issues 2018-08-13 09:34:58 +09:00