diff options
author | Darrick J. Wong <darrick.wong@oracle.com> | 2016-08-03 10:58:53 +1000 |
---|---|---|
committer | Dave Chinner <david@fromorbit.com> | 2016-08-03 10:58:53 +1000 |
commit | 0facef7fb053be4353c0a48c2f48c9dbee91cb19 (patch) | |
tree | c94892ed9bf47a98a5c0f2d9deff4cdc6f4d375a | |
parent | f2bdfda9a1c668539bc85baf5625f6f14bc510b1 (diff) | |
download | linux-stable-0facef7fb053be4353c0a48c2f48c9dbee91cb19.tar.gz linux-stable-0facef7fb053be4353c0a48c2f48c9dbee91cb19.tar.bz2 linux-stable-0facef7fb053be4353c0a48c2f48c9dbee91cb19.zip |
xfs: in _attrlist_by_handle, copy the cursor back to userspace
When we're iterating inode xattrs by handle, we have to copy the
cursor back to userspace so that a subsequent invocation actually
retrieves subsequent contents.
Signed-off-by: Darrick J. Wong <darrick.wong@oracle.com>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Dave Chinner <david@fromorbit.com>
-rw-r--r-- | fs/xfs/xfs_ioctl.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/fs/xfs/xfs_ioctl.c b/fs/xfs/xfs_ioctl.c index 9a7c87809d3b..cf46658392ce 100644 --- a/fs/xfs/xfs_ioctl.c +++ b/fs/xfs/xfs_ioctl.c @@ -387,6 +387,7 @@ xfs_attrlist_by_handle( { int error = -ENOMEM; attrlist_cursor_kern_t *cursor; + struct xfs_fsop_attrlist_handlereq __user *p = arg; xfs_fsop_attrlist_handlereq_t al_hreq; struct dentry *dentry; char *kbuf; @@ -419,6 +420,11 @@ xfs_attrlist_by_handle( if (error) goto out_kfree; + if (copy_to_user(&p->pos, cursor, sizeof(attrlist_cursor_kern_t))) { + error = -EFAULT; + goto out_kfree; + } + if (copy_to_user(al_hreq.buffer, kbuf, al_hreq.buflen)) error = -EFAULT; |