freebsd-dev/sys/ufs/ffs
Konstantin Belousov 7aac7bc18a Fix unbounded-length malloc, controlled from usermode. The added check
is performed before exact size of the buffer is calculated, but the
buffer cannot have size greater then the total space allocated for
extended attributes. The existing check is executing with precise
size, but it is too late, since buffer needs to be allocated in
advance.

Also, adapt to uio_resid being of ssize_t type.  Use lblktosize instead of
multiplying by fs block size by hand as well.

Reported and tested by:	  pho
MFC after:   1 week
2012-06-21 09:20:07 +00:00
..
ffs_alloc.c Migrate ufs and ext2fs from skpc() to memcchr(). 2012-01-01 20:47:33 +00:00
ffs_balloc.c Add a third flags argument to ffs_syncvnode to avoid a possible conflict 2012-03-25 00:02:37 +00:00
ffs_extern.h Remove unused thread argument from vtruncbuf(). 2012-04-23 13:21:28 +00:00
ffs_inode.c Remove unused thread argument from vtruncbuf(). 2012-04-23 13:21:28 +00:00
ffs_rawread.c Add a third flags argument to ffs_syncvnode to avoid a possible conflict 2012-03-25 00:02:37 +00:00
ffs_snapshot.c Remove unused thread argument from vtruncbuf(). 2012-04-23 13:21:28 +00:00
ffs_softdep.c In softdep_setup_inomapdep() we may have to allocate both inodedep 2012-06-11 23:07:21 +00:00
ffs_subr.c - Merge soft-updates journaling from projects/suj/head into head. This 2010-04-24 07:05:35 +00:00
ffs_tables.c
ffs_vfsops.c Enable vn_io_fault() lock avoidance for UFS. 2012-05-30 16:45:41 +00:00
ffs_vnops.c Fix unbounded-length malloc, controlled from usermode. The added check 2012-06-21 09:20:07 +00:00
fs.h Use implementation independent inoNN_t scalars for on-disk UFS structures 2011-11-09 07:48:48 +00:00
softdep.h - Speed up pendingblock processing again. Having too much delay between 2011-07-04 22:08:04 +00:00