Ian Dowse 3aed248695 Limit to the maximum allowed reply size the amount of data that ...

nfsrv_readdir and nfsrv_readdirplus can return. A client request
containing an over-large `count' field could trigger the "Bad nfs
svc reply" panic in nfs_syscalls.c.

Spotted while trying to reproduce kern/37304, which turned out to
be fixed in FreeBSD a long time ago.

MFC after:	1 week

2002-04-21 16:14:54 +00:00

..

nfs_serv.c

Limit to the maximum allowed reply size the amount of data that

2002-04-21 16:14:54 +00:00

nfs_srvcache.c

Unwind some more macros. NFSMADV() was kinda silly since it was right

2001-09-28 04:37:08 +00:00

nfs_srvsock.c

Rename some variables that end up shadowing their namesakes in the NFS client

2002-01-08 19:41:06 +00:00

nfs_srvsubs.c

Remove references to vm_zone.h and switch over to the new uma API.

2002-03-20 10:07:52 +00:00

nfs_syscalls.c

Change the suser() API to take advantage of td_ucred as well as do a

2002-04-01 21:31:13 +00:00

nfs.h

Rename some variables that end up shadowing their namesakes in the NFS client

2002-01-08 19:41:06 +00:00

nfsm_subs.h

The macro nfsm_reply() is supposed to allocate a reply in all cases,

2002-01-11 22:22:39 +00:00

nfsrvcache.h

Cleanup and split of nfs client and server code.

2001-09-18 23:32:09 +00:00

nfsrvstats.h

Cleanup and split of nfs client and server code.

2001-09-18 23:32:09 +00:00