Commit 03cc0789 authored by Al Viro's avatar Al Viro

do_splice_to(): cap the size before passing to ->splice_read()

pipe capacity won't exceed 2G anyway.
Signed-off-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
parent 7500c38a
...@@ -1143,6 +1143,9 @@ static long do_splice_to(struct file *in, loff_t *ppos, ...@@ -1143,6 +1143,9 @@ static long do_splice_to(struct file *in, loff_t *ppos,
if (unlikely(ret < 0)) if (unlikely(ret < 0))
return ret; return ret;
if (unlikely(len > MAX_RW_COUNT))
len = MAX_RW_COUNT;
if (in->f_op->splice_read) if (in->f_op->splice_read)
splice_read = in->f_op->splice_read; splice_read = in->f_op->splice_read;
else else
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment