Merge branch 'work.iov_iter' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

Pull vfs fix from Al Viro:
 "Braino fix for iov_iter_revert() misuse"

* 'work.iov_iter' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs:
  fix braino in generic_file_read_iter()

1 files changed, 2 insertions, 0 deletions

diff --git a/lib/iov_iter.c b/lib/iov_iter.c
index ae82d9cea553..f835964c9485 100644
--- a/lib/iov_iter.c
+++ b/lib/iov_iter.c
@@ -790,6 +790,8 @@ void iov_iter_revert(struct iov_iter *i, size_t unroll)
 {
         if (!unroll)
                 return;
+        if (WARN_ON(unroll > MAX_RW_COUNT))
+                return;
         i->count += unroll;
         if (unlikely(i->type & ITER_PIPE)) {
                 struct pipe_inode_info *pipe = i->pipe;