X-Git-Url: https://git.openpandora.org/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=kernel%2Fposix-timers.c;h=e885be1e8a1150bc144fb831ce52a675e2ae8af7;hb=f2547fe3bd47516904ec042f28b8e8d77ceec440;hp=4556182527f38fe88dba74dd753cec5ed0112785;hpb=fa514fbc57419505d0e9423dbb8742f2775f882e;p=pandora-kernel.git diff --git a/kernel/posix-timers.c b/kernel/posix-timers.c index 4556182527f3..e885be1e8a11 100644 --- a/kernel/posix-timers.c +++ b/kernel/posix-timers.c @@ -46,7 +46,7 @@ #include #include #include -#include +#include /* * Management arrays for POSIX timers. Timers are kept in slab memory @@ -639,6 +639,13 @@ static struct k_itimer *__lock_timer(timer_t timer_id, unsigned long *flags) { struct k_itimer *timr; + /* + * timer_t could be any type >= int and we want to make sure any + * @timer_id outside positive int range fails lookup. + */ + if ((unsigned long long)timer_id > INT_MAX) + return NULL; + rcu_read_lock(); timr = idr_find(&posix_timers_id, (int)timer_id); if (timr) {