Signed-off-by: Chuck Lever <chuck.lever@xxxxxxxxxx> --- fs/nfsd/nfs4xdr.c | 22 +++++++++++++++------- 1 file changed, 15 insertions(+), 7 deletions(-) diff --git a/fs/nfsd/nfs4xdr.c b/fs/nfsd/nfs4xdr.c index 1f00fe6febf9..2e163c23d013 100644 --- a/fs/nfsd/nfs4xdr.c +++ b/fs/nfsd/nfs4xdr.c @@ -1197,19 +1197,27 @@ nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read) static __be32 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir) { - DECODE_HEAD; + __be32 status; - READ_BUF(24); - p = xdr_decode_hyper(p, &readdir->rd_cookie); - COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data)); - readdir->rd_dircount = be32_to_cpup(p++); - readdir->rd_maxcount = be32_to_cpup(p++); + if (xdr_stream_decode_u64(argp->xdr, &readdir->rd_cookie) < 0) + goto xdr_error; + status = nfsd4_decode_verifier4(argp, &readdir->rd_verf); + if (status) + goto out; + if (xdr_stream_decode_u32(argp->xdr, &readdir->rd_dircount) < 0) + goto xdr_error; + if (xdr_stream_decode_u32(argp->xdr, &readdir->rd_maxcount) < 0) + goto xdr_error; status = nfsd4_decode_bitmap4(argp, readdir->rd_bmval, ARRAY_SIZE(readdir->rd_bmval)); if (status) goto out; - DECODE_TAIL; + status = nfs_ok; +out: + return status; +xdr_error: + return nfserr_bad_xdr; } static __be32