|
 |
e59f31 |
commit 595629131dbe6c5fb16d03e87bc2cb71ad3dcc4b
|
|
|
e59f31 |
Author: Eric Sandeen <sandeen@redhat.com>
|
|
|
e59f31 |
Date: Wed Feb 15 21:48:31 2017 -0600
|
|
|
e59f31 |
|
|
|
e59f31 |
xfs_metadump: ignore attr leaf with 0 entries
|
|
|
e59f31 |
|
|
|
e59f31 |
Another in the ongoing saga of attribute leaves with zero
|
|
|
e59f31 |
entries; in this case, if we try to metadump an inode with
|
|
|
e59f31 |
a zero-entries attribute leaf, the zeroing code will go off
|
|
|
e59f31 |
the rails and segfault at:
|
|
|
e59f31 |
|
|
|
e59f31 |
memset(&entries[nentries], 0,
|
|
|
e59f31 |
first_name - (char *)&entries[nentries]);
|
|
|
e59f31 |
|
|
|
e59f31 |
because first_name is null, and we try to memset a large
|
|
|
e59f31 |
(negative) number.
|
|
|
e59f31 |
|
|
|
e59f31 |
Signed-off-by: Eric Sandeen <sandeen@redhat.com>
|
|
|
e59f31 |
Reviewed-by: Darrick J. Wong <darrick.wong@oracle.com>
|
|
|
e59f31 |
Signed-off-by: Eric Sandeen <sandeen@sandeen.net>
|
|
|
e59f31 |
|
|
|
e59f31 |
diff --git a/db/metadump.c b/db/metadump.c
|
|
|
e59f31 |
index 38519f1..66952f6 100644
|
|
|
e59f31 |
--- a/db/metadump.c
|
|
|
e59f31 |
+++ b/db/metadump.c
|
|
|
e59f31 |
@@ -1654,7 +1654,8 @@ process_attr_block(
|
|
|
e59f31 |
xfs_attr3_leaf_hdr_from_disk(mp->m_attr_geo, &hdr, leaf);
|
|
|
e59f31 |
|
|
|
e59f31 |
nentries = hdr.count;
|
|
|
e59f31 |
- if (nentries * sizeof(xfs_attr_leaf_entry_t) +
|
|
|
e59f31 |
+ if (nentries == 0 ||
|
|
|
e59f31 |
+ nentries * sizeof(xfs_attr_leaf_entry_t) +
|
|
|
e59f31 |
xfs_attr3_leaf_hdr_size(leaf) >
|
|
|
e59f31 |
XFS_ATTR3_RMT_BUF_SPACE(mp, bs)) {
|
|
|
e59f31 |
if (show_warnings)
|