| commit | 2b75bc9121e54e22537207b47b71373bcb0be41c | [log] [tgz] |
|---|---|---|
| author | Sasha Levin <levinsasha928@gmail.com> | Sun Sep 09 16:16:58 2012 +0200 |
| committer | David Teigland <teigland@redhat.com> | Mon Sep 10 09:50:27 2012 -0500 |
| tree | 1b2778a163dedd71cd968b3b4e1d2049b5a86319 | |
| parent | 9c5bef5849c9fde1a37ac005299f759440cbaf4c [diff] |
dlm: check the maximum size of a request from user device_write only checks whether the request size is big enough, but it doesn't check if the size is too big. At that point, it also tries to allocate as much memory as the user has requested even if it's too much. This can lead to OOM killer kicking in, or memory corruption if (count + 1) overflows. Signed-off-by: Sasha Levin <levinsasha928@gmail.com> Signed-off-by: David Teigland <teigland@redhat.com>