Skip to content
Commit eb8052e0 authored by Wenliang Fan's avatar Wenliang Fan Committed by Chris Mason
Browse files

fs/btrfs: Integer overflow in btrfs_ioctl_resize()



The local variable 'new_size' comes from userspace. If a large number
was passed, there would be an integer overflow in the following line:
	new_size = old_size + new_size;

Signed-off-by: default avatarWenliang Fan <fanwlexca@gmail.com>
Signed-off-by: default avatarJosef Bacik <jbacik@fb.com>
Signed-off-by: default avatarChris Mason <clm@fb.com>
parent c9ea7b24
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment