On Tue, Oct 12, 2010 at 02:25:48PM +0200, Michael S. Tsirkin wrote: > > As far as I can see, maximum value for num is 64K - 1: > > if (!s.num || s.num > 0xffff || (s.num & (s.num - 1))) { > r = -EINVAL; > break; > } > > How can any of the above two trigger? > It seems easier to check value for sanity at a single place where it's > passed from userspace to kernel. > Gar. Sorry for that. My mistake. regards, dan carpenter -- To unsubscribe from this list: send the line "unsubscribe kernel-janitors" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html