diff options
| author | Oleg Drokin <[email protected]> | 2014-08-15 12:48:13 -0400 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2014-08-17 09:38:43 -0700 |
| commit | c7b09efacf54210be511450768c0ee98071feb7f (patch) | |
| tree | c76ff1da2a1f35bbd59c614dbf2115214721a0aa /include/linux/timerqueue.h | |
| parent | 2b358b4ea5b2912726d872611089e790a8388b62 (diff) | |
staging/lustre/llite: Fix integer overflow in ll_fid2path
Reported by Dan Carpenter <[email protected]>
outsize = sizeof(*gfout) + gfin->gf_pathlen;
Where outsize is int and gf_pathlen is u32 from userspace
can lead to integer overflowwhere outsize is some small number
less than sizeof(*gfout)
Add a check for pathlen to be of sensical size.
Signed-off-by: Oleg Drokin <[email protected]>
Reviewed-on: http://review.whamcloud.com/11412
Intel-bug-id: https://jira.hpdd.intel.com/browse/LU-5476
Reviewed-by: Dmitry Eremin <[email protected]>
Reviewed-by: John L. Hammond <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'include/linux/timerqueue.h')
0 files changed, 0 insertions, 0 deletions