Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit fda168c2 authored by Zhitong Wang's avatar Zhitong Wang Committed by Alex Elder
Browse files

xfs: Fix integer overflow in fs/xfs/linux-2.6/xfs_ioctl*.c



The am_hreq.opcount field in the xfs_attrmulti_by_handle() interface
is not bounded correctly. The opcount is used to determine the size
of the buffer required. The size is bounded, but can overflow and so
the size checks may not be sufficient to catch invalid opcounts.
Fix it by catching opcount values that would cause overflows before
calculating the size.

Signed-off-by: default avatarZhitong Wang <zhitong.wangzt@alibaba-inc.com>
Reviewed-by: default avatarDave Chinner <david@fromorbit.com>
parent e40152ee
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment