From: Alex Williamson <alex.williamson@redhat.com>
Date: Tue, 26 Mar 2013 17:33:16 +0000 (-0600)
Subject: vfio-pci: Fix possible integer overflow
X-Git-Tag: v3.9-rc7~33^2
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=904c680c7bf016a8619a045850937427f8d7368c;p=pandora-kernel.git

vfio-pci: Fix possible integer overflow

The VFIO_DEVICE_SET_IRQS ioctl takes a start and count parameter, both
of which are unsigned.  We attempt to bounds check these, but fail to
account for the case where start is a very large number, allowing
start + count to wrap back into the valid range.  Bounds check both
start and start + count.

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
---

Reading git-diff-tree failed