J. Bruce Fields 87d26ea777 nfsd: more careful input validation in nfsctl write methods
Neil Brown points out that we're checking buf[size-1] in a couple places
without first checking whether size is zero.

Actually, given the implementation of simple_transaction_get(), buf[-1]
is zero, so in both of these cases the subsequent check of the value of
buf[size-1] will catch this case.

But it seems fragile to depend on that, so add explicit checks for this
case.

Signed-off-by: J. Bruce Fields <bfields@citi.umich.edu>
Acked-by: NeilBrown <neilb@suse.de>
2008-02-01 16:42:15 -05:00
..
2007-07-19 10:04:52 -07:00
2008-02-01 16:42:05 -05:00
2007-05-09 12:30:54 -07:00
2008-02-01 16:42:01 -05:00
2008-02-01 16:42:05 -05:00
2008-02-01 16:42:11 -05:00
2008-02-01 16:42:05 -05:00