|
@@ -1762,6 +1762,14 @@ static bool nfsd4_session_too_many_ops(struct svc_rqst *rqstp, struct nfsd4_sess
|
|
return args->opcnt > session->se_fchannel.maxops;
|
|
return args->opcnt > session->se_fchannel.maxops;
|
|
}
|
|
}
|
|
|
|
|
|
|
|
+static bool nfsd4_request_too_big(struct svc_rqst *rqstp,
|
|
|
|
+ struct nfsd4_session *session)
|
|
|
|
+{
|
|
|
|
+ struct xdr_buf *xb = &rqstp->rq_arg;
|
|
|
|
+
|
|
|
|
+ return xb->len > session->se_fchannel.maxreq_sz;
|
|
|
|
+}
|
|
|
|
+
|
|
__be32
|
|
__be32
|
|
nfsd4_sequence(struct svc_rqst *rqstp,
|
|
nfsd4_sequence(struct svc_rqst *rqstp,
|
|
struct nfsd4_compound_state *cstate,
|
|
struct nfsd4_compound_state *cstate,
|
|
@@ -1794,6 +1802,10 @@ nfsd4_sequence(struct svc_rqst *rqstp,
|
|
if (nfsd4_session_too_many_ops(rqstp, session))
|
|
if (nfsd4_session_too_many_ops(rqstp, session))
|
|
goto out;
|
|
goto out;
|
|
|
|
|
|
|
|
+ status = nfserr_req_too_big;
|
|
|
|
+ if (nfsd4_request_too_big(rqstp, session))
|
|
|
|
+ goto out;
|
|
|
|
+
|
|
status = nfserr_badslot;
|
|
status = nfserr_badslot;
|
|
if (seq->slotid >= session->se_fchannel.maxreqs)
|
|
if (seq->slotid >= session->se_fchannel.maxreqs)
|
|
goto out;
|
|
goto out;
|