On Tue, Aug 23, 2022 at 09:05:42PM +0530, Siddh Raman Pant wrote: > Oof, I didn't mean it to be there. That would actually be wrong anyways. > > Extremely sorry for the avoidable oversight, > Siddh > > #syz test https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master Reviewed-by: Matthew Wilcox (Oracle) <willy@xxxxxxxxxxxxx> > --- > drivers/block/loop.c | 5 +++++ > 1 file changed, 5 insertions(+) > > diff --git a/drivers/block/loop.c b/drivers/block/loop.c > index e3c0ba93c1a3..e1fe8eda020f 100644 > --- a/drivers/block/loop.c > +++ b/drivers/block/loop.c > @@ -979,6 +979,11 @@ loop_set_status_from_info(struct loop_device *lo, > > lo->lo_offset = info->lo_offset; > lo->lo_sizelimit = info->lo_sizelimit; > + > + /* loff_t vars have been assigned __u64 */ > + if (lo->lo_offset < 0 || lo->lo_sizelimit < 0) > + return -EOVERFLOW; > + > memcpy(lo->lo_file_name, info->lo_file_name, LO_NAME_SIZE); > lo->lo_file_name[LO_NAME_SIZE-1] = 0; > lo->lo_flags = info->lo_flags; > -- > 2.35.1 > >
