Kirill A. Shutemov 6250a8badb 9p: use unsigned integers for nwqid/count ... As specification says, all integers in messages are unsigned. Let's fix behaviour of p9pdu_vreadf()/p9pdu_vwritef() accordingly. Fix for p9pdu_vreadf() is critical. If server replies with Rwalk, where nwqid > SHRT_MAX, the value will be interpreted as negative. kmalloc, in its order, will cast the value to (very big) size_t. It should never happen in normal situation: we never submit Twalk with nwname > 16, but malicious or broken server can still produce problematic Rwalk. Signed-off-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com> Signed-off-by: Dominique Martinet <dominique.martinet@cea.fr> Signed-off-by: Eric Van Hensbergen <ericvh@gmail.com>		2015-03-20 07:34:42 -07:00
..
client.c	9P: remove unnecessary break after return	2014-07-15 16:27:00 -07:00
error.c	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
Kconfig	net/9p: remove depends on CONFIG_EXPERIMENTAL	2013-01-11 11:39:33 -08:00
Makefile	[net/9p] Preparation and helper functions for zero copy	2011-03-15 09:57:34 -05:00
mod.c	9p: Reduce object size with CONFIG_NET_9P_DEBUG	2012-01-05 10:51:44 -06:00
protocol.c	9p: use unsigned integers for nwqid/count	2015-03-20 07:34:42 -07:00
protocol.h	net/9p: Convert net/9p protocol dumps to tracepoints	2011-10-24 11:13:12 -05:00
trans_common.c	9p: fix off by one causing access violations and memory corruption	2013-07-11 11:36:02 -07:00
trans_common.h	fs/9p: Update zero-copy implementation in 9p	2011-10-24 11:13:11 -05:00
trans_fd.c	9p: remove unused variable in p9_fd_create()	2015-03-20 07:34:41 -07:00
trans_rdma.c	9pnet_rdma: check token type before int conversion	2014-03-25 16:38:19 -05:00
trans_virtio.c	9p/trans_virtio: fix hot-unplug	2015-03-13 15:55:41 +10:30
util.c	net/9p: convert to idr_alloc()	2013-02-27 19:10:20 -08:00