提交 0aad37ef 编写于 作者: A Abhishek Kulkarni 提交者: Eric Van Hensbergen

net/9p: insulate the client against an invalid error code sent by a 9p server

A looney tunes server sending an invalid error code (which is !IS_ERR_VALUE)
can result in a client oops. So fix it by adding a check and converting unknown
or invalid error codes to -ESERVERFAULT.
Signed-off-by: NAbhishek Kulkarni <adkulkar@umail.iu.edu>
Signed-off-by: NEric Van Hensbergen <ericvh@gmail.com>
上级 48559b4c
...@@ -411,14 +411,9 @@ static int p9_check_errors(struct p9_client *c, struct p9_req_t *req) ...@@ -411,14 +411,9 @@ static int p9_check_errors(struct p9_client *c, struct p9_req_t *req)
if (c->dotu) if (c->dotu)
err = -ecode; err = -ecode;
if (!err) { if (!err || !IS_ERR_VALUE(err))
err = p9_errstr2errno(ename, strlen(ename)); err = p9_errstr2errno(ename, strlen(ename));
/* string match failed */
if (!err)
err = -ESERVERFAULT;
}
P9_DPRINTK(P9_DEBUG_9P, "<<< RERROR (%d) %s\n", -ecode, ename); P9_DPRINTK(P9_DEBUG_9P, "<<< RERROR (%d) %s\n", -ecode, ename);
kfree(ename); kfree(ename);
......
...@@ -239,7 +239,7 @@ int p9_errstr2errno(char *errstr, int len) ...@@ -239,7 +239,7 @@ int p9_errstr2errno(char *errstr, int len)
errstr[len] = 0; errstr[len] = 0;
printk(KERN_ERR "%s: server reported unknown error %s\n", printk(KERN_ERR "%s: server reported unknown error %s\n",
__func__, errstr); __func__, errstr);
errno = 1; errno = ESERVERFAULT;
} }
return -errno; return -errno;
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册