Doug / smarc-fsl-linux-kernel

Download as
Browse Code ยป

Commit 1bcaba51eba549748917f7d6eb41900ff9ee3d5f

Authored by Jan Beulich
Committed by Konrad Rzeszutek Wilk
1 parent 2ebb939ab9
Exists in smarc-l5.0.0_1.0.0-ga and in 5 other branches imx_3.10.17_1.0.1_ga, imx_3.10.53_1.1.0_ga, imx_3.14.28_1.0.0_ga, smarc-imx_3.10.53_1.1.0_ga, smarc-imx_3.14.28_1.0.0_ga

xen/xenbus: fix overflow check in xenbus_file_write() 

Acked-by: Ian Campbell <ian.campbell@citrix.com>
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Jan Beulich <jbeulich@suse.com>
[v1: Rebased on upstream]
Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>

Showing 1 changed file with 1 additions and 1 deletions Side-by-side Diff

drivers/xen/xenbus/xenbus_dev_frontend.c
Diff comments   View file @ 1bcaba5
... ... @@ -458,7 +458,7 @@
458 458 goto out;
459 459  
460 460 /* Can't write a xenbus message larger we can buffer */
461   - if ((len + u->len) > sizeof(u->u.buffer)) {
  461 + if (len > sizeof(u->u.buffer) - u->len) {
462 462 /* On error, dump existing buffer */
463 463 u->len = 0;
464 464 rc = -EINVAL;