Wenliang Fan eb8052e015 fs/btrfs: Integer overflow in btrfs_ioctl_resize()
The local variable 'new_size' comes from userspace. If a large number
was passed, there would be an integer overflow in the following line:
	new_size = old_size + new_size;

Signed-off-by: Wenliang Fan <fanwlexca@gmail.com>
Signed-off-by: Josef Bacik <jbacik@fb.com>
Signed-off-by: Chris Mason <clm@fb.com>
2014-01-28 13:20:11 -08:00
..
2013-10-24 23:43:27 -04:00
2013-12-27 15:14:45 -06:00
2013-11-13 12:09:12 +09:00
2014-01-06 14:00:23 -05:00
2013-12-08 21:14:59 -05:00
2013-10-27 16:27:07 -07:00
2013-09-16 18:20:25 -07:00
2013-12-05 13:05:48 -08:00
2013-11-09 00:16:32 -05:00
2013-12-22 11:03:49 -08:00
2013-10-24 23:34:54 -04:00
2013-09-13 23:06:40 -04:00
2013-10-24 23:34:54 -04:00
2013-09-10 18:56:31 -04:00
2013-10-24 23:34:54 -04:00
2013-11-09 00:16:20 -05:00
2013-10-24 23:34:54 -04:00
2013-11-09 00:16:19 -05:00
2013-10-24 23:35:00 -04:00
2013-10-24 23:34:54 -04:00
2013-10-24 23:34:54 -04:00
2013-10-24 23:34:54 -04:00
2013-11-09 00:16:31 -05:00
2013-11-09 00:16:20 -05:00