| commit | 15fab63e1e57be9fdb5eec1bbc5916e9825e9acb | [log] [tgz] |
|---|---|---|
| author | Matthew Wilcox <willy@infradead.org> | Fri Apr 05 14:02:10 2019 -0700 |
| committer | Linus Torvalds <torvalds@linux-foundation.org> | Sun Apr 14 10:00:04 2019 -0700 |
| tree | 1353971310401012cf4b108a375e525065d8bec0 | |
| parent | 8fde12ca79aff9b5ba951fce1a2641901b8d8e64 [diff] |
fs: prevent page refcount overflow in pipe_buf_get Change pipe_buf_get() to return a bool indicating whether it succeeded in raising the refcount of the page (if the thing in the pipe is a page). This removes another mechanism for overflowing the page refcount. All callers converted to handle a failure. Reported-by: Jann Horn <jannh@google.com> Signed-off-by: Matthew Wilcox <willy@infradead.org> Cc: stable@kernel.org Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>