android_kernel_xiaomi_sm8350/arch/parisc/hpux
Kyle McMartin 1fcbf053e5 [PATCH] sys_hpux: fix strlen_user() race
Userspace can alter the string after the kernel has run strlen_user().

Also: the strlen_user() return value includes the \0, so fix that.

Also: handle EFAULT from strlen_user().

It's unlikely anyone is using this code.  Very, very unlikely.  If I
remember correctly, CONFIG_HPUX turns this code on, but one would actually
need CONFIG_BINFMT_SOM to load a binary that could cause a problem, and
BINFMT_SOM has had an #error in it for quite some time.

Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2006-02-07 16:12:33 -08:00
..
entry_hpux.S [PARISC] Add CONFIG_DEBUG_RODATA to protect read-only data 2006-01-22 20:26:54 -05:00
fs.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
gate.S kbuild: m68k,parisc,ppc,ppc64,s390,xtensa use generic asm-offsets.h support 2005-09-09 20:57:26 +02:00
ioctl.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
Makefile Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
sys_hpux.c [PATCH] sys_hpux: fix strlen_user() race 2006-02-07 16:12:33 -08:00
wrappers.S kbuild: m68k,parisc,ppc,ppc64,s390,xtensa use generic asm-offsets.h support 2005-09-09 20:57:26 +02:00