|
@@ -370,6 +370,9 @@ struct bio *bio_kmalloc(gfp_t gfp_mask, int nr_iovecs)
|
|
{
|
|
{
|
|
struct bio *bio;
|
|
struct bio *bio;
|
|
|
|
|
|
|
|
+ if (nr_iovecs > UIO_MAXIOV)
|
|
|
|
+ return NULL;
|
|
|
|
+
|
|
bio = kmalloc(sizeof(struct bio) + nr_iovecs * sizeof(struct bio_vec),
|
|
bio = kmalloc(sizeof(struct bio) + nr_iovecs * sizeof(struct bio_vec),
|
|
gfp_mask);
|
|
gfp_mask);
|
|
if (unlikely(!bio))
|
|
if (unlikely(!bio))
|
|
@@ -697,8 +700,12 @@ static void bio_free_map_data(struct bio_map_data *bmd)
|
|
static struct bio_map_data *bio_alloc_map_data(int nr_segs, int iov_count,
|
|
static struct bio_map_data *bio_alloc_map_data(int nr_segs, int iov_count,
|
|
gfp_t gfp_mask)
|
|
gfp_t gfp_mask)
|
|
{
|
|
{
|
|
- struct bio_map_data *bmd = kmalloc(sizeof(*bmd), gfp_mask);
|
|
|
|
|
|
+ struct bio_map_data *bmd;
|
|
|
|
+
|
|
|
|
+ if (iov_count > UIO_MAXIOV)
|
|
|
|
+ return NULL;
|
|
|
|
|
|
|
|
+ bmd = kmalloc(sizeof(*bmd), gfp_mask);
|
|
if (!bmd)
|
|
if (!bmd)
|
|
return NULL;
|
|
return NULL;
|
|
|
|
|