cuitao e841d4de7f cgroup/rdma: fix integer overflow in rdmacg_try_charge() ...

[ Upstream commit c802f460dd ]

The expression `rpool->resources[index].usage + 1` is computed in int
arithmetic before being assigned to s64 variable `new`. When usage equals
INT_MAX (the default "max" value), the addition overflows to INT_MIN.
This negative value then passes the `new > max` check incorrectly,
allowing a charge that should be rejected and corrupting usage to
negative.

Fix by casting usage to s64 before the addition so the arithmetic is
done in 64-bit.

Fixes: 39d3e7584a ("rdmacg: Added rdma cgroup controller")
Signed-off-by: cuitao <cuitao@kylinos.cn>
Reviewed-by: Michal Koutný <mkoutny@suse.com>
Signed-off-by: Tejun Heo <tj@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-06-01 17:29:41 +02:00

..

cgroup-internal.h

cgroup: Make operations on the cgroup root_list RCU safe

2024-10-17 15:07:36 +02:00

cgroup-v1.c

cgroup: Remove duplicates in cgroup v1 tasks file

2023-10-25 11:54:16 +02:00

cgroup.c

cgroup: fix race between task migration and iteration

2026-04-18 10:30:54 +02:00

cpuset.c

cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key

2025-08-28 16:22:58 +02:00

debug.c

…

freezer.c

…

legacy_freezer.c

…

Makefile

…

namespace.c

cgroup:namespace: Remove unused cgroup_namespaces_init()

2023-09-19 12:20:19 +02:00

pids.c

…

rdma.c

cgroup/rdma: fix integer overflow in rdmacg_try_charge()

2026-06-01 17:29:41 +02:00

rstat.c

…