Commit 03cc0789 authored by Al Viro's avatar Al Viro

do_splice_to(): cap the size before passing to ->splice_read()

pipe capacity won't exceed 2G anyway.
Signed-off-by: default avatarAl Viro <>
parent 7500c38a
......@@ -1143,6 +1143,9 @@ static long do_splice_to(struct file *in, loff_t *ppos,
if (unlikely(ret < 0))
return ret;
if (unlikely(len > MAX_RW_COUNT))
if (in->f_op->splice_read)
splice_read = in->f_op->splice_read;
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment