Dan Carpenter f6302f1bcd relay: prevent integer overflow in relay_open() ...

"subbuf_size" and "n_subbufs" come from the user and they need to be
capped to prevent an integer overflow.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: stable@kernel.org
Signed-off-by: Jens Axboe <axboe@kernel.dk>

2012-02-10 09:04:49 +01:00

33 KiB

Raw Blame History

View Raw