| commit | eb8052e015f2c015926db45943f8ee724ace97e5 | [log] [tgz] |
|---|---|---|
| author | Wenliang Fan <fanwlexca@gmail.com> | Fri Dec 20 15:28:56 2013 +0800 |
| committer | Chris Mason <clm@fb.com> | Tue Jan 28 13:20:11 2014 -0800 |
| tree | 0bc0bbe9ac1804dd4a3e658f2a17efb59328ac6b | |
| parent | c9ea7b24ce5863d65efb1134319cede160674d41 [diff] |
fs/btrfs: Integer overflow in btrfs_ioctl_resize() The local variable 'new_size' comes from userspace. If a large number was passed, there would be an integer overflow in the following line: new_size = old_size + new_size; Signed-off-by: Wenliang Fan <fanwlexca@gmail.com> Signed-off-by: Josef Bacik <jbacik@fb.com> Signed-off-by: Chris Mason <clm@fb.com>