From: asomers <asomers@FreeBSD.org>
Date: Mon, 16 Sep 2019 16:41:01 +0000 (+0000)
Subject: Fix an off-by-one error from r351961
X-Git-Url: http://xenbits.xensource.com/gitweb?a=commitdiff_plain;h=eadbc9bd793ad437d23ed6f98c29c5e6c719063b;p=freebsd.git

Fix an off-by-one error from r351961

That revision addressed a Coverity CID that could lead to a buffer overflow,
but it had an off-by-one error in the buffer size check.

Reported by:	Coverity
Coverity CID:	1405530
MFC after:	3 days
MFC-With:	351961
Sponsored by:	The FreeBSD Foundation
---

diff --git a/sys/fs/fuse/fuse_internal.c b/sys/fs/fuse/fuse_internal.c
index ba9b77c44dc..a3fceb0e136 100644
--- a/sys/fs/fuse/fuse_internal.c
+++ b/sys/fs/fuse/fuse_internal.c
@@ -390,7 +390,7 @@ fuse_internal_invalidate_entry(struct mount *mp, struct uio *uio)
 	if ((err = uiomove(&fnieo, sizeof(fnieo), uio)) != 0)
 		return (err);
 
-	if (fnieo.namelen > sizeof(name))
+	if (fnieo.namelen >= sizeof(name))
 		return (EINVAL);
 
 	if ((err = uiomove(name, fnieo.namelen, uio)) != 0)