@@ -1562,7 +1562,11 @@ nfsd4_decode_layoutget(struct nfsd4_compoundargs *argp,
1562
1562
p = xdr_decode_hyper (p , & lgp -> lg_seg .offset );
1563
1563
p = xdr_decode_hyper (p , & lgp -> lg_seg .length );
1564
1564
p = xdr_decode_hyper (p , & lgp -> lg_minlength );
1565
- nfsd4_decode_stateid (argp , & lgp -> lg_sid );
1565
+
1566
+ status = nfsd4_decode_stateid (argp , & lgp -> lg_sid );
1567
+ if (status )
1568
+ return status ;
1569
+
1566
1570
READ_BUF (4 );
1567
1571
lgp -> lg_maxcount = be32_to_cpup (p ++ );
1568
1572
@@ -1580,7 +1584,11 @@ nfsd4_decode_layoutcommit(struct nfsd4_compoundargs *argp,
1580
1584
p = xdr_decode_hyper (p , & lcp -> lc_seg .offset );
1581
1585
p = xdr_decode_hyper (p , & lcp -> lc_seg .length );
1582
1586
lcp -> lc_reclaim = be32_to_cpup (p ++ );
1583
- nfsd4_decode_stateid (argp , & lcp -> lc_sid );
1587
+
1588
+ status = nfsd4_decode_stateid (argp , & lcp -> lc_sid );
1589
+ if (status )
1590
+ return status ;
1591
+
1584
1592
READ_BUF (4 );
1585
1593
lcp -> lc_newoffset = be32_to_cpup (p ++ );
1586
1594
if (lcp -> lc_newoffset ) {
@@ -1628,7 +1636,11 @@ nfsd4_decode_layoutreturn(struct nfsd4_compoundargs *argp,
1628
1636
READ_BUF (16 );
1629
1637
p = xdr_decode_hyper (p , & lrp -> lr_seg .offset );
1630
1638
p = xdr_decode_hyper (p , & lrp -> lr_seg .length );
1631
- nfsd4_decode_stateid (argp , & lrp -> lr_sid );
1639
+
1640
+ status = nfsd4_decode_stateid (argp , & lrp -> lr_sid );
1641
+ if (status )
1642
+ return status ;
1643
+
1632
1644
READ_BUF (4 );
1633
1645
lrp -> lrf_body_len = be32_to_cpup (p ++ );
1634
1646
if (lrp -> lrf_body_len > 0 ) {
0 commit comments