[PATCH] drivers/scsi/sg.c : fix CVE-2006-1528

Here is a 2.4 backport of Douglas Gilbert's 2.6 fix for
CVE-2006-1528.

 (GIT: 1c8e71d72026ed4c6ba0fdfd7eebd865f4fd1415)

Signed-off-by: dann frazier <dannf@debian.org>

diff --git a/drivers/scsi/sg.c b/drivers/scsi/sg.c
index 905b8a0..8b8f281 100644 (file)
--- a/drivers/scsi/sg.c
+++ b/drivers/scsi/sg.c
@@ -1192,7 +1192,7 @@ static int sg_mmap(struct file * filp, struct vm_area_struct *vma)
        sg_rb_correct4mmap(rsv_schp, 1);  /* do only once per fd lifetime */
        sfp->mmap_called = 1;
     }
-    vma->vm_flags |= (VM_RESERVED | VM_IO);
+    vma->vm_flags |= VM_RESERVED;
     vma->vm_private_data = sfp;
     vma->vm_ops = &sg_mmap_vm_ops;
     return 0;