Commit 005b23d6 authored by Dan Carpenter's avatar Dan Carpenter Committed by Greg Kroah-Hartman

staging: lustre: prevent underflows in lnet_parse_reply()

I don't know if "hdr->payload_length;" can really be negative, but if so
then we shouldn't allow it.  Do the comparison as an unsigned.
Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent faec8ab4
...@@ -1530,7 +1530,7 @@ lnet_parse_reply(lnet_ni_t *ni, lnet_msg_t *msg) ...@@ -1530,7 +1530,7 @@ lnet_parse_reply(lnet_ni_t *ni, lnet_msg_t *msg)
LASSERT(md->md_offset == 0); LASSERT(md->md_offset == 0);
rlength = hdr->payload_length; rlength = hdr->payload_length;
mlength = min_t(int, rlength, md->md_length); mlength = min_t(uint, rlength, md->md_length);
if (mlength < rlength && if (mlength < rlength &&
(md->md_options & LNET_MD_TRUNCATE) == 0) { (md->md_options & LNET_MD_TRUNCATE) == 0) {
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment