On Thu, Mar 02, 2017 at 11:02:09AM -0500, Olga Kornievskaia wrote: > From: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx> > > Signed-off-by: Anna Schumaker <Anna.Schumaker@xxxxxxxxxx> > --- > fs/read_write.c | 3 +++ > 1 file changed, 3 insertions(+) > > diff --git a/fs/read_write.c b/fs/read_write.c > index 5816d4c..1d9e305 100644 > --- a/fs/read_write.c > +++ b/fs/read_write.c > @@ -1526,6 +1526,9 @@ ssize_t vfs_copy_file_range(struct file *file_in, loff_t pos_in, > if (unlikely(ret)) > return ret; > > + if (pos_in >= i_size_read(inode_in)) > + return -EINVAL; > + This ought to go in vfs_clone_file_prep_inodes. (He says, noticing that btrfs never got updated to use that validator...) --D > if (!(file_in->f_mode & FMODE_READ) || > !(file_out->f_mode & FMODE_WRITE) || > (file_out->f_flags & O_APPEND)) > -- > 1.8.3.1 >