Re:

Vasiliy Kulikov
2010-11-22T17:02:52Z

On Sun, Nov 21, 2010 at 13:33 -0500, Dan J. Rosenberg wrote:
> In this case, count can never be -1, since it's limited by various checks in vfs_write() and rw_verify_area(), etc.

Correct, I was dummied by similar checks in similar drivers - they do
check such overflows.

--
Vasiliy Kulikov
http://www.openwall.com - bringing security into open computing environments