tree 79125b2f4755e98949f0d941a0092e5d3367bbff
parent 46e678c96bbd775abd05d3ddbe2fd334794f9157
author Jens Axboe <axboe@suse.de> 1146505848 +0200
committer Jens Axboe <axboe@suse.de> 1146505848 +0200

[PATCH] splice: fix bugs in pipe_to_file()

Found by Oleg Nesterov <oleg@tv-sign.ru>, fixed by me.

- Only allow full pages to go to the page cache.
- Check page != buf->page instead of using PIPE_BUF_FLAG_STOLEN.
- Remember to clear 'stolen' if add_to_page_cache() fails.

And as a cleanup on that:

- Make the bottom fall-through logic a little less convoluted. Also make
  the steal path hold an extra reference to the page, so we don't have
  to differentiate between stolen and non-stolen at the end.

Signed-off-by: Jens Axboe <axboe@suse.de>