]> git.itanic.dy.fi Git - linux-stable/commit
bcachefs: chardev: fix an integer overflow (32 bit only)
authorDan Carpenter <dan.carpenter@linaro.org>
Thu, 14 Sep 2023 14:59:10 +0000 (17:59 +0300)
committerKent Overstreet <kent.overstreet@linux.dev>
Sun, 22 Oct 2023 21:10:14 +0000 (17:10 -0400)
commit4ba985b84de627ba4f257c9843d0dd7146df2180
tree57e1082aae9eddcc4c930508d207411c9406b9eb
parent301e0237cadfc7c446e16eab6df38073ade3631d
bcachefs: chardev: fix an integer overflow (32 bit only)

On 32 bit systems, "sizeof(*arg) + replica_entries_bytes" can have an
integer overflow leading to memory corruption.  Use size_add() to
prevent this.

Fixes: b44dd3797034 ("bcachefs: Redo filesystem usage ioctls")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Signed-off-by: Kent Overstreet <kent.overstreet@linux.dev>
fs/bcachefs/chardev.c