diff options
| author | Jan Kara <[email protected]> | 2019-12-16 10:54:32 +0000 |
|---|---|---|
| committer | Al Viro <[email protected]> | 2019-12-16 17:48:10 +0000 |
| commit | e0ff126ee7ad405c1ef531f9f3db92929de4f20f (patch) | |
| tree | 3db8cda1843d84196659155c7690644449d2bc18 /lib/xarray.c | |
| parent | Linux 5.5-rc1 (diff) | |
| download | kernel-e0ff126ee7ad405c1ef531f9f3db92929de4f20f.tar.gz kernel-e0ff126ee7ad405c1ef531f9f3db92929de4f20f.zip | |
pipe: Fix bogus dereference in iov_iter_alignment()
We cannot look at 'i->pipe' unless we know the iter is a pipe. Move the
ring_size load to a branch in iov_iter_alignment() where we've already
checked the iter is a pipe to avoid bogus dereference.
Reported-by: [email protected]
Fixes: 8cefc107ca54 ("pipe: Use head and tail pointers for the ring, not cursor and length")
Signed-off-by: Jan Kara <[email protected]>
Signed-off-by: Al Viro <[email protected]>
Diffstat (limited to 'lib/xarray.c')
0 files changed, 0 insertions, 0 deletions