On Mon, Dec 12, 2011 at 04:55:52PM -0500, Xi Wang wrote: > Commit fa8b18ed didn't prevent the integer overflow and possible > memory corruption. "count" can go negative and bypass the check. Thanks, this looks good to me. Reviewed-by: Christoph Hellwig <hch at lst.de>