Unverified Commit 02d56ff3 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!14741 io_uring: check for overflows in io_pin_pages 

Merge Pull Request from: @ci-robot 
 
PR sync from: Long Li <leo.lilong@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/4B2XQ75XT2I55LJF4JEDQIVFVCXTPPY2/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBEAFR 
 
Link:https://gitee.com/openeuler/kernel/pulls/14741

 

Reviewed-by: default avatarzhangyi (F) <yi.zhang@huawei.com>
Signed-off-by: default avatarZhang Peng <zhangpeng362@huawei.com>
parents d8b474e6 d3e9940d

io_uring/rsrc.c

+6 −1
Original line number Diff line number Diff line
@@ -879,7 +879,12 @@ struct page **io_pin_pages(unsigned long ubuf, unsigned long len, int *npages) 
	struct page **pages = NULL;

	int pret, ret = -ENOMEM;



	end = (ubuf + len + PAGE_SIZE - 1) >> PAGE_SHIFT;

	if (check_add_overflow(ubuf, len, &end))

		return ERR_PTR(-EOVERFLOW);

	if (check_add_overflow(end, PAGE_SIZE - 1, &end))

		return ERR_PTR(-EOVERFLOW);



	end = end >> PAGE_SHIFT;

	start = ubuf >> PAGE_SHIFT;

	nr_pages = end - start;