Skip to content
Commit 4376c946 authored by fanchaoting's avatar fanchaoting Committed by Trond Myklebust
Browse files

pnfs-block: removing DM device maybe cause oops when call dev_remove



when pnfs block using device mapper,if umounting later,it maybe
cause oops. we apply "1 + sizeof(bl_umount_request)" memory for
msg->data, the memory maybe overflow when we do "memcpy(&dataptr
[sizeof(bl_msg)], &bl_umount_request, sizeof(bl_umount_request))",
because the size of bl_msg is more than 1 byte.

Signed-off-by: default avatar <fanchaoting&lt;fanchaoting@cn.fujitsu.com>
Cc: stable@vger.kernel.org
Signed-off-by: default avatarTrond Myklebust <Trond.Myklebust@netapp.com>
parent cf4ab538
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment