]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
block: fix overflow in blk_ioctl_discard()
authorLi Nan <linan122@huawei.com>
Fri, 29 Mar 2024 01:23:19 +0000 (09:23 +0800)
committerJens Axboe <axboe@kernel.dk>
Tue, 2 Apr 2024 13:43:24 +0000 (07:43 -0600)
commit22d24a544b0d49bbcbd61c8c0eaf77d3c9297155
tree57955015f8a4446436f0e7b45a7ed978325e044b
parentfbbd5d3ad9435748b8ae6451bc004ee9ac49b6b7
block: fix overflow in blk_ioctl_discard()

There is no check for overflow of 'start + len' in blk_ioctl_discard().
Hung task occurs if submit an discard ioctl with the following param:
  start = 0x80000000000ff000, len = 0x8000000000fff000;
Add the overflow validation now.

Signed-off-by: Li Nan <linan122@huawei.com>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Link: https://lore.kernel.org/r/20240329012319.2034550-1-linan666@huaweicloud.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
block/ioctl.c