Dan Carpenter 4ac2f3d3f1 relay: prevent integer overflow in relay_open() ...

commit f6302f1bcd upstream.

"subbuf_size" and "n_subbufs" come from the user and they need to be
capped to prevent an integer overflow.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2012-02-20 12:48:10 -08:00

33 KiB

Raw Blame History

View Raw