relay: fix for possible loss/corruption of produced subbufs
authorAravind Srinivasan <raa.aars@gmail.com>
Thu, 2 Apr 2009 23:58:59 +0000 (16:58 -0700)
committerLinus Torvalds <torvalds@linux-foundation.org>
Fri, 3 Apr 2009 02:05:05 +0000 (19:05 -0700)
commit2c53d9109f077900e140edb8b766132ad93b81cc
tree082c063da6c83fe2a2aa84ed0b33c504e19d05f4
parentedb79a213223488735fae1d408f4c136e9ed25d6
relay: fix for possible loss/corruption of produced subbufs

Fix possible loss/corruption of produced subbufs in
relay_subbufs_consumed().

When buf->subbufs_produced wraps around after UINT_MAX and
buf->subbufs_consumed is still < UINT_MAX, the condition

if (buf->subbufs_consumed > buf->subbufs_produced)

will be true even for certain valid values of subbufs_consumed.  This may
lead to loss or corruption of produced subbufs.

Signed-off-by: Aravind Srinivasan <raa.aars@gmail.com>
Cc: Tom Zanussi <tzanussi@gmail.com>
Cc: Tom Zanussi <zanussi@us.ibm.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
kernel/relay.c