[PATCH] Fix fadvise() parameter checking

From: Ulrich Drepper <drepper@redhat.com>

The len parameter for fadvise has a signed type and negative values passed
must be rejected.  The attached patch does the job.

diff --git a/mm/fadvise.c b/mm/fadvise.c
index 40b40b0be3e96f69bda6ca87c7e6faf8d1dcf983..d20bf2a93064ef8f2972c12313295fc4aab07286 100644 (file)
--- a/mm/fadvise.c
+++ b/mm/fadvise.c
@@ -33,7 +33,7 @@ asmlinkage long sys_fadvise64_64(int fd, loff_t offset, loff_t len, int advice)
                return -EBADF;
 
        mapping = file->f_mapping;
-       if (!mapping) {
+       if (!mapping || len < 0) {
                ret = -EINVAL;
                goto out;
        }