dm ioctl: Avoid pointer arithmetic overflow
authorDemi Marie Obenour <demi@invisiblethingslab.com>
Sat, 3 Jun 2023 14:52:40 +0000 (10:52 -0400)
committerMike Snitzer <snitzer@kernel.org>
Fri, 23 Jun 2023 14:31:51 +0000 (10:31 -0400)
commit13f4a697f8b4feb705569f9336127e9e2f9ac596
treeb06d5d26f3bafba66b50edbc6cd5cf99aa145dd7
parentb60528d9e68113e2c297c3a45102332cb1d3e608
dm ioctl: Avoid pointer arithmetic overflow

Especially on 32-bit systems, it is possible for the pointer
arithmetic to overflow and cause a userspace pointer to be
dereferenced in the kernel.

Signed-off-by: Demi Marie Obenour <demi@invisiblethingslab.com>
Reviewed-by: Mikulas Patocka <mpatocka@redhat.com>
Signed-off-by: Mike Snitzer <snitzer@kernel.org>
drivers/md/dm-ioctl.c