There is a report of io_estimate_bvec_size() truncating the calculated
number of segments that leads to corruption issues. Check it doesn't
overflow "int"s used later. Rough but simple, can be improved on top.
Cc: [email protected]
Fixes: 9ef4cbbcb4 ("io_uring: add infra for importing vectored reg buffers")
Reported-by: Google Big Sleep <[email protected]>
Signed-off-by: Pavel Begunkov <[email protected]>
Reviewed-by: Günther Noack <[email protected]>
Tested-by: Günther Noack <[email protected]>
Signed-off-by: Jens Axboe <[email protected]>
Pavel Begunkov
146eb58629