git.openpandora.org
/
pandora-kernel.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
fs/seq_file: fix out-of-bounds read
[pandora-kernel.git]
/
fs
/
ubifs
/
lprops.c
diff --git
a/fs/ubifs/lprops.c
b/fs/ubifs/lprops.c
index
f8a181e
..
ea9d491
100644
(file)
--- a/
fs/ubifs/lprops.c
+++ b/
fs/ubifs/lprops.c
@@
-300,8
+300,11
@@
void ubifs_add_to_cat(struct ubifs_info *c, struct ubifs_lprops *lprops,
default:
ubifs_assert(0);
}
default:
ubifs_assert(0);
}
+
lprops->flags &= ~LPROPS_CAT_MASK;
lprops->flags |= cat;
lprops->flags &= ~LPROPS_CAT_MASK;
lprops->flags |= cat;
+ c->in_a_category_cnt += 1;
+ ubifs_assert(c->in_a_category_cnt <= c->main_lebs);
}
/**
}
/**
@@
-334,6
+337,9
@@
static void ubifs_remove_from_cat(struct ubifs_info *c,
default:
ubifs_assert(0);
}
default:
ubifs_assert(0);
}
+
+ c->in_a_category_cnt -= 1;
+ ubifs_assert(c->in_a_category_cnt >= 0);
}
/**
}
/**