]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d33974c) | patch
fs/btrfs: Integer overflow in btrfs_ioctl_resize()
authorWenliang Fan <fanwlexca@gmail.com>
Fri, 20 Dec 2013 07:28:56 +0000 (15:28 +0800)
committerChris Mason <clm@fb.com>
Tue, 28 Jan 2014 21:20:11 +0000 (13:20 -0800)
commitd8f2de334c5731f1a6c276b00774254abbd49fab
tree0bc0bbe9ac1804dd4a3e658f2a17efb59328ac6btree | snapshot
parentd33974ce3d33b423d2ba67f6ffcbb521eebe5025commit | diff
fs/btrfs: Integer overflow in btrfs_ioctl_resize()

The local variable 'new_size' comes from userspace. If a large number
was passed, there would be an integer overflow in the following line:
new_size = old_size + new_size;

Signed-off-by: Wenliang Fan <fanwlexca@gmail.com>
Signed-off-by: Josef Bacik <jbacik@fb.com>
Signed-off-by: Chris Mason <clm@fb.com>
fs/btrfs/ioctl.c diff | blob | history
Linux Kernel Source Tree.