Xi Wang 1ecd3c7ea7 nilfs2: avoid overflowing segment numbers in nilfs_ioctl_clean_segments() ...

nsegs is read from userspace.  Limit its value and avoid overflowing nsegs
* sizeof(__u64) in the subsequent call to memdup_user().

This patch complements 481fe17e97 ("nilfs2: potential integer overflow
in nilfs_ioctl_clean_segments()").

Signed-off-by: Xi Wang <xi.wang@gmail.com>
Cc: Haogang Chen <haogangchen@gmail.com>
Acked-by: Ryusuke Konishi <konishi.ryusuke@lab.ntt.co.jp>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2012-02-08 19:03:51 -08:00

..

9p

…

adfs

…

affs

…

afs

…

autofs4

autofs4 - fix deal with autofs4_write races

2012-01-13 08:30:49 -08:00

befs

…

bfs

…

btrfs

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs

2012-01-28 17:00:19 -08:00

cachefiles

…

ceph

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

2012-02-02 15:47:33 -08:00

cifs

cifs: Fix oops in session setup code for null user mounts

2012-02-02 16:59:09 -06:00

coda

…

configfs

…

cramfs

…

debugfs

kernel-doc: fix new warnings in debugfs

2012-01-24 10:47:41 -08:00

devpts

…

dlm

…

ecryptfs

eCryptfs: move misleading function comments

2012-01-25 15:10:53 -08:00

efs

…

exofs

…

exportfs

…

ext2

…

ext3

…

ext4

…

fat

…

freevxfs

…

fscache

…

fuse

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse

2012-01-12 12:39:21 -08:00

gfs2

…

hfs

…

hfsplus

…

hostfs

…

hpfs

…

hppfs

…

hugetlbfs

mm: compaction: introduce sync-light migration for use by compaction

2012-01-12 20:13:09 -08:00

isofs

…

jbd

…

jbd2

…

jffs2

…

jfs

…

lockd

module_param: make bool parameters really bool (drivers & misc)

2012-01-13 09:32:20 +10:30

logfs

mtd: fix merge conflict resolution breakage

2012-02-01 11:10:24 -08:00

minix

…

ncpfs

…

nfs

Merge tag 'nfs-for-3.3-2' of git://git.linux-nfs.org/projects/trondmy/linux-nfs

2012-01-16 15:08:13 -08:00

nfs_common

…

nfsd

Merge branch 'for-3.3' of git://linux-nfs.org/~bfields/linux

2012-01-14 12:26:41 -08:00

nilfs2

nilfs2: avoid overflowing segment numbers in nilfs_ioctl_clean_segments()

2012-02-08 19:03:51 -08:00

nls

…

notify

fsnotify: don't BUG in fsnotify_destroy_mark()

2012-01-14 18:01:42 -08:00

ntfs

module_param: avoid bool abuse, add bint for special cases.

2012-01-13 09:32:17 +10:30

ocfs2

…

omfs

…

openpromfs

…

proc

Fix race in process_vm_rw_core

2012-02-02 12:55:17 -08:00

pstore

…

qnx4

qnx4: don't leak ->BitMap on late failure exits

2012-01-19 13:54:36 -05:00

quota

quota: Pass information that quota is stored in system file to userspace

2012-01-12 13:09:09 +01:00

ramfs

…

reiserfs

…

romfs

…

squashfs

Merge git://git.kernel.org/pub/scm/linux/kernel/git/pkl/squashfs-next

2012-01-13 10:34:57 -08:00

sysfs

sysfs: Complain bitterly about attempts to remove files from nonexistent directories.

2012-01-24 12:12:32 -08:00

sysv

…

ubifs

UBIFS: fix non-debug configuration build

2012-01-15 13:46:02 +02:00

udf

…

ufs

…

xfs

xfs: Fix missing xfs_iunlock() on error recovery path in xfs_readlink()

2012-01-25 11:01:31 -06:00

aio.c

Unused iocbs in a batch should not be accounted as active.

2012-01-13 20:39:44 -08:00

anon_inodes.c

…

attr.c

…

bad_inode.c

…

binfmt_aout.c

…

binfmt_elf_fdpic.c

…

binfmt_elf.c

…

binfmt_em86.c

…

binfmt_flat.c

…

binfmt_misc.c

…

binfmt_script.c

…

binfmt_som.c

…

bio-integrity.c

…

bio.c

…

block_dev.c

vfs: cache request_queue in struct block_device

2012-01-12 20:13:12 -08:00

buffer.c

…

char_dev.c

…

compat_binfmt_elf.c

…

compat_ioctl.c

Merge branch 'v4l_for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media

2012-01-15 12:49:56 -08:00

compat.c

…

dcache.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

2012-01-13 10:29:21 -08:00

dcookies.c

…

direct-io.c

dio: optimize cache misses in the submission path

2012-01-12 20:13:12 -08:00

drop_caches.c

…

eventfd.c

…

eventpoll.c

epoll: limit paths

2012-01-12 20:13:04 -08:00

exec.c

exec: fix use-after-free bug in setup_new_exec()

2012-02-06 15:15:20 -08:00

fcntl.c

…

fhandle.c

…

fifo.c

…

file_table.c

…

file.c

…

filesystems.c

…

fs_struct.c

…

fs-writeback.c

…

generic_acl.c

…

inode.c

vfs: remove printk from set_nlink()

2012-01-17 16:39:47 -05:00

internal.h

…

ioctl.c

…

ioprio.c

…

Kconfig

…

Kconfig.binfmt

…

libfs.c

…

locks.c

…

Makefile

…

mbcache.c

…

mount.h

…

mpage.c

fs: remove unneeded plug in mpage_readpages()

2012-01-12 09:19:54 +01:00

namei.c

audit: do not call audit_getname on error

2012-01-17 16:17:01 -05:00

namespace.c

…

no-block.c

…

open.c

…

pipe.c

pipe: fail cleanly when root tries F_SETPIPE_SZ with big size

2012-01-12 20:13:04 -08:00

pnode.c

…

pnode.h

…

posix_acl.c

…

proc_namespace.c

…

read_write.c

…

read_write.h

…

readdir.c

…

select.c

…

seq_file.c

…

signalfd.c

…

splice.c

…

stack.c

…

stat.c

…

statfs.c

…

super.c

wake up s_wait_unfrozen when ->freeze_fs fails

2012-01-17 16:38:47 -05:00

sync.c

…

timerfd.c

…

utimes.c

…

xattr_acl.c

…

xattr.c

…