Eric Biggers 96e99be40e pipe: reject F_SETPIPE_SZ with size over UINT_MAX ... A pipe's size is represented as an 'unsigned int'. As expected, writing a value greater than UINT_MAX to /proc/sys/fs/pipe-max-size fails with EINVAL. However, the F_SETPIPE_SZ fcntl silently truncates such values to 32 bits, rather than failing with EINVAL as expected. (It *does* fail with EINVAL for values above (1 << 31) but <= UINT_MAX.) Fix this by moving the check against UINT_MAX into round_pipe_size() which is called in both cases. Link: http://lkml.kernel.org/r/20180111052902.14409-6-ebiggers3@gmail.com Signed-off-by: Eric Biggers <ebiggers@google.com> Acked-by: Kees Cook <keescook@chromium.org> Acked-by: Joe Lawrence <joe.lawrence@redhat.com> Cc: Alexander Viro <viro@zeniv.linux.org.uk> Cc: "Luis R . Rodriguez" <mcgrof@kernel.org> Cc: Michael Kerrisk <mtk.manpages@gmail.com> Cc: Mikulas Patocka <mpatocka@redhat.com> Cc: Willy Tarreau <w@1wt.eu> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2018-02-06 18:32:47 -08:00
..
bpf	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2018-01-31 14:31:10 -08:00
cgroup	kernel/cpuset: current_cpuset_is_being_rebound can be boolean	2018-02-06 18:32:47 -08:00
configs	Makefile: introduce CONFIG_CC_STACKPROTECTOR_AUTO	2018-02-06 18:32:44 -08:00
debug	signal: Simplify and fix kdb_send_sig	2018-01-03 18:01:08 -06:00
events	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2018-01-31 14:31:10 -08:00
gcov	…
irq	genirq: remove unneeded kallsyms include	2018-02-06 18:32:47 -08:00
livepatch	Merge branch 'for-4.16/remove-immediate' into for-linus	2018-01-31 16:36:38 +01:00
locking	Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-01-30 10:44:56 -08:00
power	x86/power: Fix swsusp_arch_resume prototype	2018-02-02 23:33:50 +01:00
printk	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk	2018-02-01 13:36:15 -08:00
rcu	SCSI misc on 20180131	2018-01-31 11:23:28 -08:00
sched	cpumask: make cpumask_size() return "unsigned int"	2018-02-06 18:32:45 -08:00
time	hrtimer: remove unneeded kallsyms include	2018-02-06 18:32:47 -08:00
trace	Mostly clean ups and small fixes	2018-02-01 13:15:23 -08:00
.gitignore	…
Kconfig.freezer	…
Kconfig.hz	…
Kconfig.locks	…
Kconfig.preempt	…
Makefile	error-injection: Support fault injection framework	2018-01-12 17:33:38 -08:00
acct.c	kernel/acct.c: fix the acct->needcheck check in check_free_space()	2018-01-04 16:45:09 -08:00
async.c	kernel/async.c: revert "async: simplify lowest_in_progress()"	2018-02-06 18:32:44 -08:00
audit.c	…
audit.h	…
audit_fsnotify.c	…
audit_tree.c	…
audit_watch.c	…
auditfilter.c	…
auditsc.c	…
backtracetest.c	…
bounds.c	…
capability.c	…
compat.c	cpumask: make cpumask_size() return "unsigned int"	2018-02-06 18:32:45 -08:00
configs.c	…
context_tracking.c	…
cpu.c	Merge branch 'timers-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2017-12-31 12:30:34 -08:00
cpu_pm.c	…
crash_core.c	kdump: write correct address of mem_section into vmcoreinfo	2018-01-13 10:42:48 -08:00
crash_dump.c	…
cred.c	…
delayacct.c	delayacct: Account blkio completion on the correct task	2018-01-16 03:29:36 +01:00
dma.c	…
elfcore.c	…
exec_domain.c	…
exit.c	kernel/exit.c: export abort() to modules	2018-01-04 16:45:09 -08:00
extable.c	…
fail_function.c	error-injection: Support fault injection framework	2018-01-12 17:33:38 -08:00
fork.c	kernel/fork.c: add comment about usage of CLONE_FS flags and namespaces	2018-02-06 18:32:45 -08:00
freezer.c	…
futex.c	pids: introduce find_get_task_by_vpid() helper	2018-02-06 18:32:46 -08:00
futex_compat.c	…
groups.c	kernel: make groups_sort calling a responsibility group_info allocators	2017-12-14 16:00:49 -08:00
hung_task.c	…
irq_work.c	irq/work: Improve the flag definitions	2018-01-08 19:43:15 +01:00
jump_label.c	sched/core: Fix cpu.max vs. cpuhotplug deadlock	2018-01-24 10:03:44 +01:00
kallsyms.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk	2018-02-01 13:36:15 -08:00
kcmp.c	…
kcov.c	kcov: detect double association with a single task	2018-02-06 18:32:46 -08:00
kexec.c	…
kexec_core.c	…
kexec_file.c	…
kexec_internal.h	…
kmod.c	…
kprobes.c	error-injection: Separate error-injection from kprobe	2018-01-12 17:33:38 -08:00
ksysfs.c	…
kthread.c	…
latencytop.c	…
memremap.c	…
module-internal.h	…
module.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk	2018-02-01 13:36:15 -08:00
module_signing.c	…
notifier.c	…
nsproxy.c	…
padata.c	padata: add SPDX identifier	2018-01-05 18:43:00 +11:00
panic.c	…
params.c	…
pid.c	pids: introduce find_get_task_by_vpid() helper	2018-02-06 18:32:46 -08:00
pid_namespace.c	…
profile.c	…
ptrace.c	pids: introduce find_get_task_by_vpid() helper	2018-02-06 18:32:46 -08:00
range.c	…
reboot.c	…
relay.c	kernel/relay.c: revert "kernel/relay.c: fix potential memory leak"	2018-02-06 18:32:46 -08:00
resource.c	kernel/resource: iomem_is_exclusive can be boolean	2018-02-06 18:32:47 -08:00
seccomp.c	Merge branch 'next-seccomp' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2018-01-31 13:44:45 -08:00
signal.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/livepatching	2018-01-31 13:02:18 -08:00
smp.c	…
smpboot.c	…
smpboot.h	…
softirq.c	…
stacktrace.c	…
stop_machine.c	…
sys.c	fix typo in assignment of fs default overflow gid	2017-12-14 16:01:45 -06:00
sys_ni.c	…
sysctl.c	pipe: reject F_SETPIPE_SZ with size over UINT_MAX	2018-02-06 18:32:47 -08:00
sysctl_binary.c	…
task_work.c	locking/barriers: Convert users of lockless_dereference() to READ_ONCE()	2017-12-17 13:57:15 +01:00
taskstats.c	pids: introduce find_get_task_by_vpid() helper	2018-02-06 18:32:46 -08:00
test_kprobes.c	…
torture.c	torture: Save a line in stutter_wait(): while -> for	2017-12-11 09:18:30 -08:00
tracepoint.c	…
tsacct.c	…
ucount.c	…
uid16.c	kernel: make groups_sort calling a responsibility group_info allocators	2017-12-14 16:00:49 -08:00
umh.c	…
up.c	…
user-return-notifier.c	…
user.c	…
user_namespace.c	…
utsname.c	…
utsname_sysctl.c	…
watchdog.c	…
watchdog_hld.c	…
workqueue.c	Staging/IIO patches for 4.16-rc1	2018-02-01 09:51:57 -08:00
workqueue_internal.h	…