diff options
| author | Al Viro <[email protected]> | 2010-09-20 14:13:09 +0000 |
|---|---|---|
| committer | Linus Torvalds <[email protected]> | 2010-09-20 17:44:37 +0000 |
| commit | 5f4ad04a1e805d14de080ff9d5384b4d20518a9a (patch) | |
| tree | 63252b79b48b7dfd29d9a8081a34c858dab1de74 /lib/dynamic_debug.c | |
| parent | frv: restart_block.fn needs to be reset on sigreturn (diff) | |
| download | kernel-5f4ad04a1e805d14de080ff9d5384b4d20518a9a.tar.gz kernel-5f4ad04a1e805d14de080ff9d5384b4d20518a9a.zip | |
frv: fix address verification holes in setup_frame/setup_rt_frame
a) sa_handler might be maliciously set to point to kernel memory;
blindly dereferencing it in FDPIC case is a Bad Idea(tm).
b) I'm not sure you need that set_fs(USER_DS) there at all, but if you
do, you'd better do it *before* checking the frame you've decided to
use with access_ok(), lest sigaltstack() becomes a convenient
roothole.
Signed-off-by: Al Viro <[email protected]>
Signed-off-by: David Howells <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Diffstat (limited to 'lib/dynamic_debug.c')
0 files changed, 0 insertions, 0 deletions