diff options
author | Alex Williamson <alex.williamson@redhat.com> | 2013-03-26 11:33:16 -0600 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2013-04-12 09:52:12 -0700 |
commit | 7c852afafa3bf8daeaee5c60399d55c13618ac8a (patch) | |
tree | 9f099960778463cbaac04902116d766b5135efa5 /fs | |
parent | 77e2cc382c06a8be48f80e769991e9a4b36a03ce (diff) |
vfio-pci: Fix possible integer overflow
commit 904c680c7bf016a8619a045850937427f8d7368c upstream.
The VFIO_DEVICE_SET_IRQS ioctl takes a start and count parameter, both
of which are unsigned. We attempt to bounds check these, but fail to
account for the case where start is a very large number, allowing
start + count to wrap back into the valid range. Bounds check both
start and start + count.
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'fs')
0 files changed, 0 insertions, 0 deletions