Re: Buggy commit tracked to: "Re: [PATCH 2/9] iov_iter: move rw_copy_check_uvector() into lib/iov_iter.c"

From
Nick Desaulniers <ndesaulniers@google.com>
Date
2020-10-22 17:01:00
Also in
io-uring, keyrings, linux-arch, linux-arm-kernel, linux-block, linux-fsdevel, linux-mips, linux-mm, linux-s390, linux-scsi, linux-security-module, linuxppc-dev, lkml, sparclinux
Reply to
Matthew Wilcox, 2020-10-22
On Thu, Oct 22, 2020 at 9:40 AM Matthew Wilcox [off-list ref] wrote:
On Thu, Oct 22, 2020 at 04:35:17PM +0000, David Laight wrote:
quoted
Wait...
readv(2) defines:
      ssize_t readv(int fd, const struct iovec *iov, int iovcnt);
It doesn't really matter what the manpage says.  What does the AOSP
libc header say?
Same: https://android.googlesource.com/platform/bionic/+/refs/heads/master/libc/include/sys/uio.h#38

Theoretically someone could bypass libc to make a system call, right?
quoted
But the syscall is defined as:

SYSCALL_DEFINE3(readv, unsigned long, fd, const struct iovec __user *, vec,
                unsigned long, vlen)
{
        return do_readv(fd, vec, vlen, 0);
}

-- 
Thanks,
~Nick Desaulniers
Thread (54 messages) 54 messages, 9 authors, last reply 2020-11-02
Keyboard shortcuts
hback out one level
jnext message in thread / next series-diff position
kprevious message in thread / previous series-diff position
ldrill in
Escclose help / fold thread tree
?toggle this help