From: Xi Wang <xi.wang@gmail.com>
Date: Fri, 20 Apr 2012 20:49:44 +0000 (-0500)
Subject: ceph: fix bounds check in ceph_decode_need and ceph_encode_need
X-Git-Tag: v3.5-rc1~36^2~31
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=76aa542fb90e3e91edb1146d10ca7cf2cae8e7e9;p=pandora-kernel.git

ceph: fix bounds check in ceph_decode_need and ceph_encode_need

Given a large n, the bounds check (*p + n > end) can be bypassed due to
pointer wraparound.  A safer check is (n > end - *p).

[elder@dreamhost.com: inverted test and renamed ceph_has_room()]

Signed-off-by: Xi Wang <xi.wang@gmail.com>
Reviewed-by: Alex Elder <elder@dreamhost.com>
---

Reading git-diff-tree failed