From 41be3fd085bfaf05df972e7b8c3f9f3042a6148b Mon Sep 17 00:00:00 2001
From: Evgeny Kuznetsov <ext-eugeny.kuznetsov@nokia.com>
Date: Wed, 27 Oct 2010 15:33:37 -0700
Subject: [PATCH] --- yaml --- r: 218528 b: refs/heads/master c:
 f4a2589feaef0a9b737a3e582b37ee96695bb25f h: refs/heads/master v: v3

---
 [refs]                | 2 +-
 trunk/kernel/cgroup.c | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/[refs] b/[refs]
index 790dee3785ba..c536b7caa77c 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 32a8cf235e2f192eb002755076994525cdbaa35a
+refs/heads/master: f4a2589feaef0a9b737a3e582b37ee96695bb25f
diff --git a/trunk/kernel/cgroup.c b/trunk/kernel/cgroup.c
index 3e6517e51fd3..5cf366965d0c 100644
--- a/trunk/kernel/cgroup.c
+++ b/trunk/kernel/cgroup.c
@@ -1922,6 +1922,8 @@ static int cgroup_release_agent_write(struct cgroup *cgrp, struct cftype *cft,
 				      const char *buffer)
 {
 	BUILD_BUG_ON(sizeof(cgrp->root->release_agent_path) < PATH_MAX);
+	if (strlen(buffer) >= PATH_MAX)
+		return -EINVAL;
 	if (!cgroup_lock_live_group(cgrp))
 		return -ENODEV;
 	strcpy(cgrp->root->release_agent_path, buffer);