diff options
| author | Chris Metcalf <cmetcalf@tilera.com> | 2010-10-28 19:47:06 (GMT) |
|---|---|---|
| committer | Chris Metcalf <cmetcalf@tilera.com> | 2010-11-01 19:31:17 (GMT) |
| commit | 1deb9c5dfb179819ecdbf80a1d121e26c63caab3 (patch) | |
| tree | c6f6ec6030eb22f094a65c07e63312758d079794 /mm/swap.c | |
| parent | 34a89d26bdc4ba46a406fa3842239e921c493d44 (diff) | |
| download | linux-1deb9c5dfb179819ecdbf80a1d121e26c63caab3.tar.xz | |
arch/tile: don't allow user code to set the PL via ptrace or signal return
The kernel was allowing any component of the pt_regs to be updated either
by signal handlers writing to the stack, or by processes writing via
PTRACE_POKEUSR or PTRACE_SETREGS, which meant they could set their PL
up from 0 to 1 and get access to kernel code and data (or, in practice,
cause a kernel panic). We now always reset the ex1 field, allowing the
user to set their ICS bit only.
Signed-off-by: Chris Metcalf <cmetcalf@tilera.com>
Diffstat (limited to 'mm/swap.c')
0 files changed, 0 insertions, 0 deletions