diff options
| author |  Jens Axboe <jaxboe@fusionio.com>
| 2010-11-10 14:36:25 +0100 |
|---|---|---|
| committer | Jens Axboe <jaxboe@fusionio.com>
| 2010-11-10 14:40:43 +0100 |
| commit | cb4644cac4a2797afc847e6c92736664d4b0ea34 (patch) | |
| tree | 14170d74d5040be49af14b484f252d888141a99f /block/ioctl.c | |
| parent | block: limit vec count in bio_kmalloc() and bio_alloc_map_data() (diff) | |
| download | linux-cb4644cac4a2797afc847e6c92736664d4b0ea34.tar.gz linux-cb4644cac4a2797afc847e6c92736664d4b0ea34.tar.bz2 linux-cb4644cac4a2797afc847e6c92736664d4b0ea34.zip | |
bio: take care not overflow page count when mapping/copying user data
If the iovec is being set up in a way that causes uaddr + PAGE_SIZE
to overflow, we could end up attempting to map a huge number of
pages. Check for this invalid input type.
Reported-by: Dan Rosenberg <drosenberg@vsecurity.com>
Cc: stable@kernel.org
Signed-off-by: Jens Axboe <jaxboe@fusionio.com>
Diffstat (limited to 'block/ioctl.c')
0 files changed, 0 insertions, 0 deletions