From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andrew Morton Subject: Re: [PATCH] nilfs2: avoid overflowing segment numbers in nilfs_ioctl_clean_segments() Date: Fri, 3 Feb 2012 20:36:05 -0800 Message-ID: <20120203203605.da735392.akpm@linux-foundation.org> References: <1328282767-13158-1-git-send-email-xi.wang@gmail.com> <20120204.121302.227986518.ryusuke@osrg.net> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20120204.121302.227986518.ryusuke-sG5X7nlA6pw@public.gmane.org> Sender: linux-nilfs-owner-u79uwXL29TY76Z2rM5mHXA@public.gmane.org List-ID: Content-Type: text/plain; charset="us-ascii" To: Ryusuke Konishi Cc: xi.wang-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org, linux-nilfs-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, haogangchen-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org On Sat, 04 Feb 2012 12:13:02 +0900 (JST) Ryusuke Konishi wrote: > On Fri, 3 Feb 2012 10:26:07 -0500, Xi Wang wrote: > > nsegs is read from userspace. Limit its value and avoid overflowing > > nsegs * sizeof(__u64) in the subsequent call to memdup_user(). > > > > This patch complements 481fe17e973fb97aa3edf17c69557afe88d8334f. > > > > Signed-off-by: Xi Wang > > Cc: Haogang Chen > > Cc: Andrew Morton > > --- > > fs/nilfs2/ioctl.c | 2 ++ > > 1 files changed, 2 insertions(+), 0 deletions(-) > > Acked-by: Ryusuke Konishi > > > Thank you for posting this fix. > > Andrew, could you send this uptream in this cycle ? I sure can. -- To unsubscribe from this list: send the line "unsubscribe linux-nilfs" in the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org More majordomo info at http://vger.kernel.org/majordomo-info.html