On Sat, 04 Feb 2012 12:13:02 +0900 (JST) Ryusuke Konishi <konishi.ryusuke@xxxxxxxxxxxxx> wrote: > On Fri, 3 Feb 2012 10:26:07 -0500, Xi Wang wrote: > > nsegs is read from userspace. Limit its value and avoid overflowing > > nsegs * sizeof(__u64) in the subsequent call to memdup_user(). > > > > This patch complements 481fe17e973fb97aa3edf17c69557afe88d8334f. > > > > Signed-off-by: Xi Wang <xi.wang@xxxxxxxxx> > > Cc: Haogang Chen <haogangchen@xxxxxxxxx> > > Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> > > --- > > fs/nilfs2/ioctl.c | 2 ++ > > 1 files changed, 2 insertions(+), 0 deletions(-) > > Acked-by: Ryusuke Konishi <konishi.ryusuke@xxxxxxxxxxxxx> > > > Thank you for posting this fix. > > Andrew, could you send this uptream in this cycle ? I sure can. -- To unsubscribe from this list: send the line "unsubscribe linux-nilfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html