Matthew Wilcox wrote: > It should be checked earlier than this. There's this code in > dbMount(). Why isn't this catching it? This vulnerability occurs because a very large value can be passed to iagp->agstart. So that code doesn't prevent the vulnerability.