d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

kern_copy_file_range(): check the file type.

Browse Source 
The syscall can only operate on valid vnode types.

Reported and tested by:	pho
Sponsored by:	The FreeBSD Foundation
This commit is contained in:
Konstantin Belousov 2020-03-24 17:16:52 +00:00
parent db1102f213
commit 8cf8c2f65a
1 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
sys/kern/vfs_syscalls.c
View File

@ -4735,9 +4735,25 @@ kern_copy_file_range(struct thread *td, int infd, off_t *inoffp, int outfd,
error = fget_read(td, infd, &cap_read_rights, &infp);
if (error != 0)
goto out;
if (infp->f_ops == &badfileops) {
error = EBADF;
goto out;
}
if (infp->f_vnode == NULL) {
error = EINVAL;
goto out;
}
error = fget_write(td, outfd, &cap_write_rights, &outfp);
if (error != 0)
goto out;
if (outfp->f_ops == &badfileops) {
error = EBADF;
goto out;
}
if (outfp->f_vnode == NULL) {
error = EINVAL;
goto out;
}
/* Set the offset pointers to the correct place. */
if (inoffp == NULL)