diff options
| author | Chen Gang | 2013-09-11 23:22:44 +0200 |
|---|---|---|
| committer | Linus Torvalds | 2013-09-12 00:58:03 +0200 |
| commit | 4c3bffc272755c98728c2b58b1a8148cf9e9fd1f (patch) | |
| tree | 9d9583af840199d75e8e8eac61159372a74a38ba /mm/page-writeback.c | |
| parent | mm/mremap.c: call pud_free() after fail calling pmd_alloc() (diff) | |
| download | kernel-qcow2-linux-4c3bffc272755c98728c2b58b1a8148cf9e9fd1f.tar.gz kernel-qcow2-linux-4c3bffc272755c98728c2b58b1a8148cf9e9fd1f.tar.xz kernel-qcow2-linux-4c3bffc272755c98728c2b58b1a8148cf9e9fd1f.zip | |
mm/backing-dev.c: check user buffer length before copying data to the related user buffer
'*lenp' may be less than "sizeof(kbuf)" so we must check this before the
next copy_to_user().
pdflush_proc_obsolete() is called by sysctl which 'procname' is
"nr_pdflush_threads", if the user passes buffer length less than
"sizeof(kbuf)", it will cause issue.
Signed-off-by: Chen Gang <gang.chen@asianux.com>
Reviewed-by: Jan Kara <jack@suse.cz>
Cc: Tejun Heo <tj@kernel.org>
Cc: Jeff Moyer <jmoyer@redhat.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'mm/page-writeback.c')
0 files changed, 0 insertions, 0 deletions