diff options
| author | Liu Bo <bo.li.liu@oracle.com> | 2014-06-08 19:04:13 +0800 |
|---|---|---|
| committer | Jiri Slaby <jslaby@suse.cz> | 2014-07-02 12:06:40 +0200 |
| commit | 9cfeffa534ee24706e3269ec2aff6b8c8d278f68 (patch) | |
| tree | f7ee32bd0d78014e359096fc67f0487b83a80b3b | |
| parent | b01e4806671d4b756fb35285b08ba140da41ffc8 (diff) | |
Btrfs: use right type to get real comparison
commit cd857dd6bc2ae9ecea14e75a34e8a8fdc158e307 upstream.
We want to make sure the point is still within the extent item, not to verify
the memory it's pointing to.
Signed-off-by: Liu Bo <bo.li.liu@oracle.com>
Signed-off-by: Chris Mason <clm@fb.com>
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
| -rw-r--r-- | fs/btrfs/backref.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/fs/btrfs/backref.c b/fs/btrfs/backref.c index 5eb50b5df777..79559682255a 100644 --- a/fs/btrfs/backref.c +++ b/fs/btrfs/backref.c @@ -1409,7 +1409,7 @@ static int __get_extent_inline_ref(unsigned long *ptr, struct extent_buffer *eb, *out_eiref = (struct btrfs_extent_inline_ref *)(ei + 1); } *ptr = (unsigned long)*out_eiref; - if ((void *)*ptr >= (void *)ei + item_size) + if ((unsigned long)(*ptr) >= (unsigned long)ei + item_size) return -ENOENT; } |