From: Wenliang Fan <fanwlexca@gmail.com>
Date: Fri, 20 Dec 2013 07:28:56 +0000 (+0800)
Subject: fs/btrfs: Integer overflow in btrfs_ioctl_resize()
X-Git-Tag: v3.14-rc1~29^2~68
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=eb8052e015f2c015926db45943f8ee724ace97e5;p=pandora-kernel.git

fs/btrfs: Integer overflow in btrfs_ioctl_resize()

The local variable 'new_size' comes from userspace. If a large number
was passed, there would be an integer overflow in the following line:
	new_size = old_size + new_size;

Signed-off-by: Wenliang Fan <fanwlexca@gmail.com>
Signed-off-by: Josef Bacik <jbacik@fb.com>
Signed-off-by: Chris Mason <clm@fb.com>
---

Reading git-diff-tree failed