diff options
| author | Matthew Wilcox (Oracle) <willy@infradead.org> | 2021-08-04 20:07:34 -0700 |
|---|---|---|
| committer | Darrick J. Wong <djwong@kernel.org> | 2021-08-05 10:30:33 -0700 |
| commit | ae44f9c286da3fbb3f827076403ea64fa9adfef2 (patch) | |
| tree | 414e901d697c4df69376171fd9aabf24b8a2ba2e /fs/iomap | |
| parent | ab069d5fdcd14530d4223746c8d01f421d4c4057 (diff) | |
| download | linux-stable-ae44f9c286da3fbb3f827076403ea64fa9adfef2.tar.gz linux-stable-ae44f9c286da3fbb3f827076403ea64fa9adfef2.tar.bz2 linux-stable-ae44f9c286da3fbb3f827076403ea64fa9adfef2.zip | |
iomap: Add another assertion to inline data handling
Check that the file tail does not cross a page boundary. Requested by
Andreas.
Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org>
Reviewed-by: Darrick J. Wong <djwong@kernel.org>
Signed-off-by: Darrick J. Wong <djwong@kernel.org>
Diffstat (limited to 'fs/iomap')
| -rw-r--r-- | fs/iomap/buffered-io.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/fs/iomap/buffered-io.c b/fs/iomap/buffered-io.c index 8ee0211bea86..586d9d078ce1 100644 --- a/fs/iomap/buffered-io.c +++ b/fs/iomap/buffered-io.c @@ -215,6 +215,8 @@ static int iomap_read_inline_data(struct inode *inode, struct page *page, if (PageUptodate(page)) return PAGE_SIZE - poff; + if (WARN_ON_ONCE(size > PAGE_SIZE - poff)) + return -EIO; if (WARN_ON_ONCE(size > PAGE_SIZE - offset_in_page(iomap->inline_data))) return -EIO; |