Re: [PATCH 1/8] Guard bvec iteration logic

2017-03-31 Thread Ming Lei
On Thu, Mar 30, 2017 at 9:49 PM, Dmitry Monakhov wrote: > If some one try to attempt advance bvec beyond it's size we simply > dump WARN_ONCE and continue to iterate beyond bvec array boundaries. > This simply means that we endup dereferencing/corrupting random memory > region. > > Code was added

[PATCH 1/8] Guard bvec iteration logic

2017-03-30 Thread Dmitry Monakhov
If some one try to attempt advance bvec beyond it's size we simply dump WARN_ONCE and continue to iterate beyond bvec array boundaries. This simply means that we endup dereferencing/corrupting random memory region. Code was added long time ago here 4550dd6c, luckily no one hit it in real life :)