summaryrefslogtreecommitdiff
path: root/fs/eventfd.c
diff options
context:
space:
mode:
authorSasha Levin <levinsasha928@gmail.com>2012-09-09 18:16:58 +0400
committerDavid Teigland <teigland@redhat.com>2012-09-10 18:50:27 +0400
commit2b75bc9121e54e22537207b47b71373bcb0be41c (patch)
tree1b2778a163dedd71cd968b3b4e1d2049b5a86319 /fs/eventfd.c
parent9c5bef5849c9fde1a37ac005299f759440cbaf4c (diff)
downloadlinux-2b75bc9121e54e22537207b47b71373bcb0be41c.tar.xz
dlm: check the maximum size of a request from user
device_write only checks whether the request size is big enough, but it doesn't check if the size is too big. At that point, it also tries to allocate as much memory as the user has requested even if it's too much. This can lead to OOM killer kicking in, or memory corruption if (count + 1) overflows. Signed-off-by: Sasha Levin <levinsasha928@gmail.com> Signed-off-by: David Teigland <teigland@redhat.com>
Diffstat (limited to 'fs/eventfd.c')
0 files changed, 0 insertions, 0 deletions