From mboxrd@z Thu Jan 1 00:00:00 1970 From: Christoph Hellwig Subject: Re: [patch 4/8] mm: write_cache_pages type overflow fix Date: Thu, 9 Oct 2008 04:23:36 -0400 Message-ID: <20081009082336.GB6637@infradead.org> References: <20081009155039.139856823@suse.de> <20081009174822.516911376@suse.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Andrew Morton , Mikulas Patocka , linux-mm@kvack.org, linux-fsdevel@vger.kernel.org To: npiggin@suse.de Return-path: Received: from bombadil.infradead.org ([18.85.46.34]:52419 "EHLO bombadil.infradead.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751101AbYJIIYC (ORCPT ); Thu, 9 Oct 2008 04:24:02 -0400 Content-Disposition: inline In-Reply-To: <20081009174822.516911376@suse.de> Sender: linux-fsdevel-owner@vger.kernel.org List-ID: On Fri, Oct 10, 2008 at 02:50:43AM +1100, npiggin@suse.de wrote: > In the range_cont case, range_start is set to index << PAGE_CACHE_SHIFT, but > index is a pgoff_t and range_start is loff_t, so we can get truncation of the > value on 32-bit platforms. Fix this by adding the standard loff_t cast. > > This is a data interity bug (depending on how range_cont is used). Aneesh has a patch to kill the range_cont flag, which is queued up for 2.6.28.