tree f054c849b1e8856912050342fcb27d83a6f42830
parent a6cd6bf9f8cab154a4a086fe786bd7422954d8dc
author Lepton Wu <ytht.net@gmail.com> 1192602590 -0700
committer Linus Torvalds <torvalds@woody.linux-foundation.org> 1192635777 -0700

reiserfs: fix kernel panic on corrupted directory

When reading corrupted reiserfs directory data, d_reclen could be a
negative number or a big positive number, this can lead to kernel panic or
oop.  The following patch adds a sanity check.

Signed-off-by: Lepton Wu <ytht.net@gmail.com>
Cc: Chris Mason <chris.mason@oracle.com>
Cc: Jeff Mahoney <jeffm@suse.com>
Cc: "Vladimir V. Saveliev" <vs@namesys.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>