From f123d3a578991c11cdc073bb16fa14a30d01992d Mon Sep 17 00:00:00 2001 From: Sage Weil Date: Wed, 7 Jan 2009 10:40:56 -0800 Subject: [PATCH] kclient: fix buffer overrun in parse_reply_info_trace() Bug introduced by fb882d34c1be8fc7058f0f636bb68b134d638743. --- src/kernel/mds_client.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/kernel/mds_client.c b/src/kernel/mds_client.c index 3cda5e9b485df..e1c9013f8f33b 100644 --- a/src/kernel/mds_client.c +++ b/src/kernel/mds_client.c @@ -84,7 +84,8 @@ static int parse_reply_info_trace(void **p, void *end, info->trace_in = kmalloc(numi * (sizeof(*info->trace_in) + sizeof(*info->trace_dir) + sizeof(*info->trace_dname) + - sizeof(*info->trace_dname_len)), + sizeof(*info->trace_dname_len) + + sizeof(*info->trace_dlease)), GFP_NOFS); if (info->trace_in == NULL) { err = -ENOMEM; -- 2.39.5