summaryrefslogtreecommitdiff
path: root/include/linux
diff options
context:
space:
mode:
authorcuitao <cuitao@kylinos.cn>2026-04-14 09:53:27 +0800
committerTejun Heo <tj@kernel.org>2026-04-17 07:25:27 -1000
commitc802f460dd485c1332b5a35e7adcfb2bc22536a2 (patch)
tree48a4084420acda33564a9b3617e0f67f232b4eba /include/linux
parenta5b98009f16d8a5fb4a8ff9a193f5735515c38fa (diff)
cgroup/rdma: fix integer overflow in rdmacg_try_charge()
The expression `rpool->resources[index].usage + 1` is computed in int arithmetic before being assigned to s64 variable `new`. When usage equals INT_MAX (the default "max" value), the addition overflows to INT_MIN. This negative value then passes the `new > max` check incorrectly, allowing a charge that should be rejected and corrupting usage to negative. Fix by casting usage to s64 before the addition so the arithmetic is done in 64-bit. Fixes: 39d3e7584a68 ("rdmacg: Added rdma cgroup controller") Signed-off-by: cuitao <cuitao@kylinos.cn> Reviewed-by: Michal Koutný <mkoutny@suse.com> Signed-off-by: Tejun Heo <tj@kernel.org>
Diffstat (limited to 'include/linux')
0 files changed, 0 insertions, 0 deletions