From: Jens Axboe <jaxboe@fusionio.com>
Date: Wed, 10 Nov 2010 13:36:25 +0000 (+0100)
Subject: bio: take care not overflow page count when mapping/copying user data
X-Git-Tag: v2.6.27.57~31
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=99b6f6c69d47e4e61856884e96020bb4a57d6158;p=pandora-kernel.git

bio: take care not overflow page count when mapping/copying user data

commit cb4644cac4a2797afc847e6c92736664d4b0ea34 upstream.

If the iovec is being set up in a way that causes uaddr + PAGE_SIZE
to overflow, we could end up attempting to map a huge number of
pages. Check for this invalid input type.

Reported-by: Dan Rosenberg <drosenberg@vsecurity.com>
Signed-off-by: Jens Axboe <jaxboe@fusionio.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
---

Reading git-diff-tree failed