iovec: make sure the caller actually wants anything in memcpy_fromiov…

…ecend Check for cases when the caller requests 0 bytes instead of running off and dereferencing potentially invalid iovecs. Signed-off-by: Sasha Levin <[email protected]> Signed-off-by: David S. Miller <[email protected]>
ashr · Aug 2, 2014 · 06ebb06 · 06ebb06
1 parent fcdfe3a
commit 06ebb06
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/lib/iovec.c b/lib/iovec.c
@@ -85,6 +85,10 @@ EXPORT_SYMBOL(memcpy_toiovecend);
 int memcpy_fromiovecend(unsigned char *kdata, const struct iovec *iov,
 			int offset, int len)
 {
+	/* No data? Done! */
+	if (len == 0)
+		return 0;
+
 	/* Skip over the finished iovecs */
 	while (offset >= iov->iov_len) {
 		offset -= iov->iov_len;