OSDN Git Service

security: insufficient range checks in certain fault handlers
authorWilly Tarreau <w@1wt.eu>
Sun, 3 Feb 2008 17:32:33 +0000 (18:32 +0100)
committerWilly Tarreau <w@1wt.eu>
Mon, 11 Feb 2008 05:48:05 +0000 (06:48 +0100)
commit70fc53fa115cefe9ddb33bc284f77a7b10fabbbf
treee25077da7fa9878be29d7d6e767548f8ab8261b6
parentba89d5a7c93fd275487ab58268ca53cf14b426bd
security: insufficient range checks in certain fault handlers

This is the 2.4 version of Nick Piggin's work on 2.6 fault handlers.
This deals with security vulnerability CVE-2008-0007.

Drivers that register a ->nopage handler, that does not range-check its
offset argument, must set VM_DONTEXPAND in the vm_flags to ensure the
offset is within bounds.

Signed-off-by: Willy Tarreau <w@1wt.eu>
drivers/char/drm-4.0/vm.c
drivers/char/drm/drm_vm.h
drivers/sound/via82cxxx_audio.c
fs/ncpfs/mmap.c