tree 7efd3404a0d24af1c4893e238273e3759d824cd6
parent 0cbcddb1e618603fc3eb0845852c0425dd1dbf29
author Alessio Balsini <balsini@android.com> 1616166314 +0000
committer Tim Zimmermann <tim@linux4.de> 1705222016 +0100
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEEuwYxAyE4TRnuhLgPbcIaY/gZxe8FAmWjn4AACgkQbcIaY/gZ
 xe/uiw/+OLvyqvi5LqbMBBqrnZpzXNFS4JY03nagWcvGxHXjdd6BR0jfOTIpiawS
 +O5Jea3IQPfVQ/lHM83oPE14F8k2iv1jFWPKSV1N1Z/AjtMIKuo937f5IouQTtcg
 LljivRHxfa/1oE4t+9Q7ePIMNEl/YzZ0xktxi/dIwclEgr1jkkdv4Q8WWgfTTsNp
 y1O1USVmPcGY+pZi/Vy048jCE4g/er+bqLNpQUcz6TcfU2vvcQyvp5n5y81Wifho
 gTknd5AeT4idziAIlHhcdEPwFSFMqiwj/6TfFjHJZ8azchDOuYdJMiQABFz9sFCe
 N2DhMxCEhe6jKIkWQUpePi6s8KGab+My96FpWHH10oSOc2MyJBTRsKXe9ozX7FZK
 wkrIoWoeiSm63BWOL05X2tlFEjCHKSesYFSDGiYuuDzf2eGqO5AxekJSSGrSwG0u
 hDMXdpUAE1Eo0J1UfFSo9/3LQ3URsdIkWeVXovb/Zs43lLWpYXwpdhfP5FjclmMo
 egEIUuKqy7IS5KMLoP8GqBtv0ZMn0VITKHrY4/oCfs0W30s2u9frsU2C/teFXagY
 2FQR55Q9IVl9kvTE2WANzrPtzn8ZU6K13bUguOFdV78Lr6Z5hnP5s3Xiq3nkxwd5
 dY6MJPSualSApYstFU+0Ga0MxZWlUJGVuGLweMJh2vEj5Grs71M=
 =kdBA
 -----END PGP SIGNATURE-----

UPSTREAM: fuse: fix matching of FUSE_DEV_IOC_CLONE command

With commit f8425c939663 ("fuse: 32-bit user space ioctl compat for fuse
device") the matching constraints for the FUSE_DEV_IOC_CLONE ioctl command
are relaxed, limited to the testing of command type and number.  As Arnd
noticed, this is wrong as it wouldn't ensure the correctness of the data
size or direction for the received FUSE device ioctl.

Fix by bringing back the comparison of the ioctl received by the FUSE
device to the originally generated FUSE_DEV_IOC_CLONE.

Fixes: f8425c939663 ("fuse: 32-bit user space ioctl compat for fuse device")
Reported-by: Arnd Bergmann <arnd@kernel.org>
Signed-off-by: Alessio Balsini <balsini@android.com>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Signed-off-by: Lee Jones <lee.jones@linaro.org>
Signed-off-by: Alessio Balsini <balsini@android.com>
Change-Id: I372d8399db6d603ba20ef50528acf6645e4d3c66
(cherry picked from commit 6076f5f341e612152879bfda99f0b76c1953bf0b)