Thread (89 messages) 89 messages, 18 authors, 2017-05-13

[kernel-hardening] Re: [PATCH v9 1/4] syscalls: Verify address limit before returning to user-mode

From: arnd@arndb.de (Arnd Bergmann)
Date: 2017-05-10 07:28:58
Also in: linux-api, linux-s390, lkml

On Tue, May 9, 2017 at 6:03 PM, Christoph Hellwig [off-list ref] wrote:
On Tue, May 09, 2017 at 06:02:50AM -0700, Christoph Hellwig wrote:
quoted
On Tue, May 09, 2017 at 06:00:01AM -0700, Andy Lutomirski wrote:
quoted
fs/splice.c has some, ahem, interesting uses that have been the source
of nasty exploits in the past.  Converting them to use iov_iter
properly would be really, really nice.  Christoph, I don't suppose
you'd like to do that?
I can take care of all the fs code including this one.
I spent the afternoon hacking up where I'd like this to head.  It's
completely untested as of now:

        http://git.infradead.org/users/hch/vfs.git/shortlog/refs/heads/setfs-elimination
My older time64_t syscall series has the side-effect of doing something
like this to the time-related compat handlers in kernel/compat.c. If nobody
else has started looking at removing set_fs from those, I can extract
the relevant parts from my series.

      Arnd
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help