pnfs-block: removing DM device maybe cause oops when call dev_remove
authorfanchaoting <fanchaoting@cn.fujitsu.com>
Thu, 21 Mar 2013 01:15:30 +0000 (09:15 +0800)
committerTrond Myklebust <Trond.Myklebust@netapp.com>
Thu, 21 Mar 2013 14:11:06 +0000 (10:11 -0400)
commit4376c94618c26225e69e17b7c91169c45a90b292
tree87d1eeb7c799c4c51fbdf396fab1100857e605fb
parentcf4ab538f1516606d3ae730dce15d6f33d96b7e1
pnfs-block: removing DM device maybe cause oops when call dev_remove

when pnfs block using device mapper,if umounting later,it maybe
cause oops. we apply "1 + sizeof(bl_umount_request)" memory for
msg->data, the memory maybe overflow when we do "memcpy(&dataptr
[sizeof(bl_msg)], &bl_umount_request, sizeof(bl_umount_request))",
because the size of bl_msg is more than 1 byte.

Signed-off-by: fanchaoting<fanchaoting@cn.fujitsu.com>
Cc: stable@vger.kernel.org
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
fs/nfs/blocklayout/blocklayoutdm.c