Jens Axboe cb4644cac4 bio: take care not overflow page count when mapping/copying user data ...

If the iovec is being set up in a way that causes uaddr + PAGE_SIZE
to overflow, we could end up attempting to map a huge number of
pages. Check for this invalid input type.

Reported-by: Dan Rosenberg <drosenberg@vsecurity.com>
Cc: stable@kernel.org
Signed-off-by: Jens Axboe <jaxboe@fusionio.com>

2010-11-10 14:40:43 +01:00

40 KiB

Raw Blame History

View Raw