Re: [PATCH next v2] nvdimm: Prevent integer overflow in ramdax_get_config_data()

[Ira Weiny]

Dan Carpenter wrote:
> The "cmd->in_offset" variable comes from the user via the __nd_ioctl()
> function.  The problem is that the "cmd->in_offset + cmd->in_length"
> addition could have an integer wrapping issue if cmd->in_offset is close
> to UINT_MAX .  Both "cmd->in_offset" and "cmd->in_length" are u32
> variables.
> 
> Fixes: 43bc0aa19a21 ("nvdimm: allow exposing RAM carveouts as NVDIMM DIMM 
> devices")
> Signed-off-by: Dan Carpenter <dan.carpen...@linaro.org>

Staged.

Thanks!
Ira

[snip]