Commit dce34ce2 authored by Trond Myklebust's avatar Trond Myklebust
Browse files

NFS: Prevent integer overflow in nfs_scan_list() 



Also ensure that nfs_inode ncommit and npages are large enough to represent
all possible values for the number of pages.

Signed-off-by: default avatarTrond Myklebust <Trond.Myklebust@netapp.com>
parent 2aefa104

fs/nfs/pagelist.c

+2 −0
Original line number Diff line number Diff line
@@ -425,6 +425,8 @@ int nfs_scan_list(struct nfs_inode *nfsi, 
						req->wb_index, tag);

				nfs_list_add_request(req, dst);

				res++;

				if (res == INT_MAX)

					goto out;

			}

		}

include/linux/nfs_fs.h

+1 −1
Original line number Diff line number Diff line
@@ -158,7 +158,7 @@ struct nfs_inode { 
	spinlock_t		req_lock;

	struct radix_tree_root	nfs_page_tree;



	unsigned int		ncommit,

	unsigned long		ncommit,

				npages;



	/* Open contexts for shared mmap writes */