X-Git-Url: http://git.cascardo.info/?a=blobdiff_plain;f=fs%2Fioctl.c;h=c415668c86d4cc727460ae0f0eb5a6d1f5840f61;hb=d0c1d15f5ed7f028d2c284b7fed7e73575d9c24d;hp=0f56deb24ce6547c1aaa13e6a731779c09047077;hpb=0cbbc422d56668528f6efd1234fe908010284082;p=cascardo%2Flinux.git

diff --git a/fs/ioctl.c b/fs/ioctl.c
index 0f56deb24ce6..c415668c86d4 100644
--- a/fs/ioctl.c
+++ b/fs/ioctl.c
@@ -568,7 +568,7 @@ static int ioctl_fsthaw(struct file *filp)
 	return thaw_super(sb);
 }
 
-static long ioctl_file_dedupe_range(struct file *file, void __user *arg)
+static int ioctl_file_dedupe_range(struct file *file, void __user *arg)
 {
 	struct file_dedupe_range __user *argp = arg;
 	struct file_dedupe_range *same = NULL;
@@ -582,6 +582,10 @@ static long ioctl_file_dedupe_range(struct file *file, void __user *arg)
 	}
 
 	size = offsetof(struct file_dedupe_range __user, info[count]);
+	if (size > PAGE_SIZE) {
+		ret = -ENOMEM;
+		goto out;
+	}
 
 	same = memdup_user(argp, size);
 	if (IS_ERR(same)) {