git: 5edf7227ec33 - main - pseudofs: limit writes to 1M

[Konstantin Belousov]

The branch main has been updated by kib:

URL: https://cgit.FreeBSD.org/src/commit/?id=5edf7227ec339f651c7328e63df323f6ef10345f

commit 5edf7227ec339f651c7328e63df323f6ef10345f
Author:     Konstantin Belousov <kib at FreeBSD.org>
AuthorDate: 2021-04-13 19:48:44 +0000
Commit:     Konstantin Belousov <kib at FreeBSD.org>
CommitDate: 2021-04-14 07:23:21 +0000

    pseudofs: limit writes to 1M
    
    Noted and reviewed by:  markj
    Tested by:      pho
    Sponsored by:   The FreeBSD Foundation
    MFC after:      1 week
    Differential revision:  https://reviews.freebsd.org/D29752
---
 sys/fs/pseudofs/pseudofs_vnops.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/sys/fs/pseudofs/pseudofs_vnops.c b/sys/fs/pseudofs/pseudofs_vnops.c
index e386ceba71f8..29bb1544e7ad 100644
--- a/sys/fs/pseudofs/pseudofs_vnops.c
+++ b/sys/fs/pseudofs/pseudofs_vnops.c
@@ -1102,6 +1102,9 @@ pfs_write(struct vop_write_args *va)
 	if (pn->pn_fill == NULL)
 		PFS_RETURN (EIO);
 
+	if (uio->uio_resid > PFS_MAXBUFSIZ)
+		PFS_RETURN (EIO);
+
 	/*
 	 * This is necessary because either process' privileges may
 	 * have changed since the open() call.