Matthew Wilcox wrote:> It should be checked earlier than this. There's this code in> dbMount(). Why isn't this catching it?This vulnerability occurs because a very large value can be passed to iagp->agstart. So that code doesn't prevent the vulnerability.