[Linux-cachefs] [PATCH v2] cachefiles: Fix KASAN slab-out-of-bounds in cachefiles_set_volume_xattr

[David Howells]

Dave Wysochanski <dwysocha at redhat.com> wrote:

> -	len += sizeof(*buf);
> -	buf = kmalloc(len, GFP_KERNEL);
> +	buf = kmalloc(sizeof(*buf) + len, GFP_KERNEL);

Okay, your V2 is wrong and your V1 is correct (len must include the reserverd
word so that it gets saved onto disk).

David