diff options
| author | Trond Myklebust <trond.myklebust@hammerspace.com> | 2024-09-13 20:57:04 +0300 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2024-11-11 01:07:08 +0300 |
| commit | ace149e0830c380ddfce7e466fe860ca502fe4ee (patch) | |
| tree | 56dcd5d10190831e96e235d13143bc08de5f0941 /fs/btrfs/dev-replace.c | |
| parent | a9cda7c0ffedb47b23002e109bd26ab2a2ab99c9 (diff) | |
| download | linux-ace149e0830c380ddfce7e466fe860ca502fe4ee.tar.xz | |
filemap: Fix bounds checking in filemap_read()
If the caller supplies an iocb->ki_pos value that is close to the
filesystem upper limit, and an iterator with a count that causes us to
overflow that limit, then filemap_read() enters an infinite loop.
This behaviour was discovered when testing xfstests generic/525 with the
"localio" optimisation for loopback NFS mounts.
Reported-by: Mike Snitzer <snitzer@kernel.org>
Fixes: c2a9737f45e2 ("vfs,mm: fix a dead loop in truncate_inode_pages_range()")
Tested-by: Mike Snitzer <snitzer@kernel.org>
Signed-off-by: Trond Myklebust <trond.myklebust@hammerspace.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'fs/btrfs/dev-replace.c')
0 files changed, 0 insertions, 0 deletions