On a corrupted file system the ->len field could be wrong leading to
a buffer overflow.
Reported-and-acked-by: NClement LECIGNE <clement.lecigne@netasq.com>
Signed-off-by: NDan Carpenter <dan.carpenter@oracle.com>
Cc: stable@kernel.org
Signed-off-by: NLinus Torvalds <torvalds@linux-foundation.org>