Larry Woodman 5ec1055aa5 Avoid pgoff overflow in remap_file_pages ...

Thomas Pollet noticed that the remap_file_pages() system call in
fremap.c has a potential overflow in the first part of the if statement
below, which could cause it to process bogus input parameters.
Specifically the pgoff + size parameters could be wrap thereby
preventing the system call from failing when it should.

Reported-by: Thomas Pollet <thomas.pollet@gmail.com>
Signed-off-by: Larry Woodman <lwoodman@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2010-09-25 09:34:58 -07:00

..

backing-dev.c

bdi: Initialize noop_backing_dev_info properly

2010-09-22 09:48:47 +02:00

bootmem.c

…

bounce.c

bounce: call flush_dcache_page() after bounce_copy_vec()

2010-09-09 18:57:25 -07:00

compaction.c

mm: compaction: handle active and inactive fairly in too_many_isolated

2010-09-09 18:57:24 -07:00

debug-pagealloc.c

…

dmapool.c

…

fadvise.c

…

failslab.c

…

filemap_xip.c

…

filemap.c

…

fremap.c

Avoid pgoff overflow in remap_file_pages

2010-09-25 09:34:58 -07:00

highmem.c

…

hugetlb.c

hugetlb, rmap: fix confusing page locking in hugetlb_cow()

2010-09-23 17:29:18 -07:00

hwpoison-inject.c

…

init-mm.c

…

internal.h

…

Kconfig

mm: avoid warning when COMPACTION is selected

2010-09-09 18:57:24 -07:00

Kconfig.debug

…

kmemcheck.c

…

kmemleak-test.c

…

kmemleak.c

…

ksm.c

mm: fix swapin race condition

2010-09-09 18:57:24 -07:00

maccess.c

…

madvise.c

…

Makefile

…

memblock.c

…

memcontrol.c

memcg: convert to use zone_to_nid() from bare zone->zone_pgdat->node_id

2010-08-11 08:59:19 -07:00

memory_hotplug.c

memory hotplug: fix next block calculation in is_removable

2010-09-09 18:57:24 -07:00

memory-failure.c

Merge branch 'hwpoison' of git://git.kernel.org/pub/scm/linux/kernel/git/ak/linux-mce-2.6

2010-08-12 10:15:10 -07:00

memory.c

mm: further fix swapin race condition

2010-09-20 10:44:37 -07:00

mempolicy.c

…

mempool.c

…

migrate.c

…

mincore.c

…

mlock.c

mm: Move vma_stack_continue into mm.h

2010-09-09 09:05:06 -07:00

mm_init.c

…

mmap.c

mmap: call unlink_anon_vmas() in __split_vma() in case of error

2010-09-22 17:22:40 -07:00

mmu_context.c

…

mmu_notifier.c

…

mmzone.c

mm: page allocator: calculate a better estimate of NR_FREE_PAGES when memory is low and kswapd is awake

2010-09-09 18:57:25 -07:00

mprotect.c

…

mremap.c

…

msync.c

…

nommu.c

mm: make the vma list be doubly linked

2010-08-21 08:49:21 -07:00

oom_kill.c

oom: filter unkillable tasks from tasklist dump

2010-09-22 17:22:39 -07:00

page_alloc.c

mm: page allocator: drain per-cpu lists after direct reclaim allocation fails

2010-09-09 18:57:25 -07:00

page_cgroup.c

…

page_io.c

…

page_isolation.c

…

page-writeback.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

2010-08-28 14:07:20 -07:00

pagewalk.c

…

percpu_up.c

…

percpu-km.c

…

percpu-vm.c

…

percpu.c

percpu: fix pcpu_last_unit_cpu

2010-09-21 08:12:25 +02:00

prio_tree.c

…

quicklist.c

…

readahead.c

…

rmap.c

hugetlb, rmap: add BUG_ON(!PageLocked) in hugetlb_add_anon_rmap()

2010-09-23 17:29:19 -07:00

shmem.c

shmem: put_super must percpu_counter_destroy

2010-08-17 18:33:11 -07:00

slab.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/penberg/slab-2.6

2010-08-22 10:08:52 -07:00

slob.c

…

slub.c

…

sparse-vmemmap.c

…

sparse.c

…

swap_state.c

…

swap.c

…

swapfile.c

swap: discard while swapping only if SWAP_FLAG_DISCARD

2010-09-09 18:57:25 -07:00

thrash.c

…

truncate.c

…

util.c

…

vmalloc.c

Merge branch 'stable/xen-swiotlb-0.8.6' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen

2010-08-12 09:09:41 -07:00

vmscan.c

vmscan: check all_unreclaimable in direct reclaim path

2010-09-22 17:22:39 -07:00

vmstat.c

mm: page allocator: calculate a better estimate of NR_FREE_PAGES when memory is low and kswapd is awake

2010-09-09 18:57:25 -07:00