提交 99172157 编写于 作者: J Jens Axboe 提交者: Linus Torvalds

[PATCH] Fix missing ret assignment in __bio_map_user() error path

If get_user_pages() returns less pages than what we asked for, we jump
to out_unmap which will return ERR_PTR(ret).  But ret can contain a
positive number just smaller than local_nr_pages, so be sure to set it
to -EFAULT always.

Problem found and diagnosed by Damien Le Moal <damien@sdl.hitachi.co.jp>
Signed-off-by: NJens Axboe <axboe@suse.de>
Signed-off-by: NLinus Torvalds <torvalds@osdl.org>
上级 16070428
...@@ -654,9 +654,10 @@ static struct bio *__bio_map_user_iov(request_queue_t *q, ...@@ -654,9 +654,10 @@ static struct bio *__bio_map_user_iov(request_queue_t *q,
write_to_vm, 0, &pages[cur_page], NULL); write_to_vm, 0, &pages[cur_page], NULL);
up_read(&current->mm->mmap_sem); up_read(&current->mm->mmap_sem);
if (ret < local_nr_pages) if (ret < local_nr_pages) {
ret = -EFAULT;
goto out_unmap; goto out_unmap;
}
offset = uaddr & ~PAGE_MASK; offset = uaddr & ~PAGE_MASK;
for (j = cur_page; j < page_limit; j++) { for (j = cur_page; j < page_limit; j++) {
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册