Xi Wang 1ecd3c7ea7 nilfs2: avoid overflowing segment numbers in nilfs_ioctl_clean_segments() ... nsegs is read from userspace. Limit its value and avoid overflowing nsegs * sizeof(__u64) in the subsequent call to memdup_user(). This patch complements 481fe17e97 ("nilfs2: potential integer overflow in nilfs_ioctl_clean_segments()"). Signed-off-by: Xi Wang <xi.wang@gmail.com> Cc: Haogang Chen <haogangchen@gmail.com> Acked-by: Ryusuke Konishi <konishi.ryusuke@lab.ntt.co.jp> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2012-02-08 19:03:51 -08:00
..
Kconfig	…
Makefile	…
alloc.c	…
alloc.h	…
bmap.c	…
bmap.h	…
btnode.c	…
btnode.h	…
btree.c	…
btree.h	…
cpfile.c	…
cpfile.h	…
dat.c	…
dat.h	…
dir.c	nilfs: propagate umode_t	2012-01-03 22:55:04 -05:00
direct.c	…
direct.h	…
export.h	…
file.c	fs: push i_mutex and filemap_write_and_wait down into ->fsync() handlers	2011-07-20 20:47:59 -04:00
gcinode.c	…
ifile.c	…
ifile.h	…
inode.c	nilfs: propagate umode_t	2012-01-03 22:55:04 -05:00
ioctl.c	nilfs2: avoid overflowing segment numbers in nilfs_ioctl_clean_segments()	2012-02-08 19:03:51 -08:00
mdt.c	…
mdt.h	…
namei.c	switch ->mknod() to umode_t	2012-01-03 22:54:54 -05:00
nilfs.h	nilfs: propagate umode_t	2012-01-03 22:55:04 -05:00
page.c	…
page.h	…
recovery.c	…
segbuf.c	…
segbuf.h	…
segment.c	freezer: unexport refrigerator() and update try_to_freeze() slightly	2011-11-21 12:32:22 -08:00
segment.h	…
sufile.c	…
sufile.h	…
super.c	vfs: switch ->show_options() to struct dentry *	2012-01-06 23:19:54 -05:00
the_nilfs.c	…
the_nilfs.h	…