tree 87d1eeb7c799c4c51fbdf396fab1100857e605fb
parent cf4ab538f1516606d3ae730dce15d6f33d96b7e1
author fanchaoting <fanchaoting@cn.fujitsu.com> 1363828530 +0800
committer Trond Myklebust <Trond.Myklebust@netapp.com> 1363875066 -0400

pnfs-block: removing DM device maybe cause oops when call dev_remove

when pnfs block using device mapper,if umounting later,it maybe
cause oops. we apply "1 + sizeof(bl_umount_request)" memory for
msg->data, the memory maybe overflow when we do "memcpy(&dataptr
[sizeof(bl_msg)], &bl_umount_request, sizeof(bl_umount_request))",
because the size of bl_msg is more than 1 byte.

Signed-off-by: fanchaoting<fanchaoting@cn.fujitsu.com>
Cc: stable@vger.kernel.org
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>