[kernel-hardening] Re: [PATCH v9 1/4] syscalls: Verify address limit before returning to user-mode
From: arnd@arndb.de (Arnd Bergmann)
Date: 2017-05-10 07:28:58
Also in:
linux-api, linux-s390, lkml
From: arnd@arndb.de (Arnd Bergmann)
Date: 2017-05-10 07:28:58
Also in:
linux-api, linux-s390, lkml
On Tue, May 9, 2017 at 6:03 PM, Christoph Hellwig [off-list ref] wrote:
On Tue, May 09, 2017 at 06:02:50AM -0700, Christoph Hellwig wrote:quoted
On Tue, May 09, 2017 at 06:00:01AM -0700, Andy Lutomirski wrote:quoted
fs/splice.c has some, ahem, interesting uses that have been the source of nasty exploits in the past. Converting them to use iov_iter properly would be really, really nice. Christoph, I don't suppose you'd like to do that?I can take care of all the fs code including this one.I spent the afternoon hacking up where I'd like this to head. It's completely untested as of now: http://git.infradead.org/users/hch/vfs.git/shortlog/refs/heads/setfs-elimination
My older time64_t syscall series has the side-effect of doing something
like this to the time-related compat handlers in kernel/compat.c. If nobody
else has started looking at removing set_fs from those, I can extract
the relevant parts from my series.
Arnd