idr: Fix idr_alloc_u32 on 32-bit systems
authorMatthew Wilcox (Oracle) <willy@infradead.org>
Sat, 2 Nov 2019 04:25:08 +0000 (00:25 -0400)
committerMatthew Wilcox (Oracle) <willy@infradead.org>
Sun, 3 Nov 2019 11:36:50 +0000 (06:36 -0500)
Attempting to allocate an entry at 0xffffffff when one is already
present would succeed in allocating one at 2^32, which would confuse
everything.  Return -ENOSPC in this case, as expected.

Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org>
lib/radix-tree.c

index 18c1dfb..c8fa1d2 100644 (file)
@@ -1529,7 +1529,7 @@ void __rcu **idr_get_free(struct radix_tree_root *root,
                        offset = radix_tree_find_next_bit(node, IDR_FREE,
                                                        offset + 1);
                        start = next_index(start, node, offset);
-                       if (start > max)
+                       if (start > max || start == 0)
                                return ERR_PTR(-ENOSPC);
                        while (offset == RADIX_TREE_MAP_SIZE) {
                                offset = node->offset + 1;