> On Mar 15, 2022, at 12:30 PM, Trond Myklebust <trondmy@xxxxxxxxxxxxxxx> wrote: > > On Tue, 2022-03-15 at 16:22 +0000, Chuck Lever III wrote: >> >> >>> On Mar 15, 2022, at 11:34 AM, Dan Carpenter >>> <dan.carpenter@xxxxxxxxxx> wrote: >>> >>> On a 32 bit system, the "len * sizeof(*p)" operation can have an >>> integer overflow. >>> >>> c: stable@xxxxxxxxxxxxxxx >>> Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx> >> >> Trond, this patch was To: me, but either you or I can take this. >> Please let me know your preference. >> > > I don't mind either way. If you've got it applied already, then let's > send it through your tree. I've applied this one and "prevent underflow in nfssvc_decode_writeargs". Thanks, Trond and Dan! -- Chuck Lever