![]() | ||||||||||
Messages in this thread Patch in this message |
diff --git a/Makefile b/Makefile index 6a949eb..99c5e87 100644 --- a/Makefile +++ b/Makefile @@ -1,7 +1,7 @@ VERSION = 2 PATCHLEVEL = 6 SUBLEVEL = 22 -EXTRAVERSION = .17 +EXTRAVERSION = .18 NAME = Holy Dancing Manatees, Batman! # *DOCUMENTATION* diff --git a/fs/splice.c b/fs/splice.c index e263d3b..dbbe267 100644 --- a/fs/splice.c +++ b/fs/splice.c @@ -1182,6 +1182,9 @@ static int get_iovec_page_array(const struct iovec __user *iov, if (unlikely(!base)) break; + if (!access_ok(VERIFY_READ, base, len)) + break; + /* * Get this base offset and number of pages, then map * in the user pages. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ | |||||||||
| Last update: 2008-02-11 07:49 [W:0.318 / U:1.120 seconds] ©2003-2008 Jasper Spaans | ||||||||||