fuse: reduce allocation size for splice_write

The 'bufs' array contains 'pipe->buffers' elements, but the fuse_dev_splice_write() uses only 'pipe->nrbufs' elements. So reduce the allocation size to 'pipe->nrbufs' elements. Signed-off-by: Andrey Ryabinin <[email protected]> Signed-off-by: Miklos Szeredi <[email protected]>
berg · Jul 26, 2018 · 9635453 · 9635453
1 parent d6d931a
commit 9635453
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/fs/fuse/dev.c b/fs/fuse/dev.c
@@ -1957,7 +1957,7 @@ static ssize_t fuse_dev_splice_write(struct pipe_inode_info *pipe,
 
 	pipe_lock(pipe);
 
-	bufs = kvmalloc_array(pipe->buffers, sizeof(struct pipe_buffer),
+	bufs = kvmalloc_array(pipe->nrbufs, sizeof(struct pipe_buffer),
 			      GFP_KERNEL);
 	if (!bufs) {
 		pipe_unlock(pipe);