orangefs: fix bounds check for listxattr

Signed-off-by: Martin Brandenburg <martin@omnibond.com>
Cc: stable@vger.kernel.org
Signed-off-by: Mike Marshall <hubcap@omnibond.com>

diff --git a/fs/orangefs/xattr.c b/fs/orangefs/xattr.c
index 74a81b1daaac8850b68f37bc46110657082dfcc1..fba4db7d0512c59087101412d2234fb7acaa61ae 100644 (file)
--- a/fs/orangefs/xattr.c
+++ b/fs/orangefs/xattr.c
@@ -358,7 +358,7 @@ ssize_t orangefs_listxattr(struct dentry *dentry, char *buffer, size_t size)
 
        returned_count = new_op->downcall.resp.listxattr.returned_count;
        if (returned_count < 0 ||
-           returned_count >= ORANGEFS_MAX_XATTR_LISTLEN) {
+           returned_count > ORANGEFS_MAX_XATTR_LISTLEN) {
                gossip_err("%s: impossible value for returned_count:%d:\n",
                __func__,
                returned_count);