You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Dan Rosenberg c25a785d66 score: fix off-by-one index into syscall table ... If the provided system call number is equal to __NR_syscalls, the current check will pass and a function pointer just after the system call table may be called, since sys_call_table is an array with total size __NR_syscalls. Whether or not this is a security bug depends on what the compiler puts immediately after the system call table. It's likely that this won't do anything bad because there is an additional NULL check on the syscall entry, but if there happens to be a non-NULL value immediately after the system call table, this may result in local privilege escalation. Signed-off-by: Dan Rosenberg <drosenberg@vsecurity.com> Cc: <stable@vger.kernel.org> Cc: Chen Liqin <liqin.chen@sunplusct.com> Cc: Lennox Wu <lennox.wu@gmail.com> Cc: Eugene Teo <eugeneteo@kernel.sg> Cc: Arnd Bergmann <arnd@arndb.de> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		13 years ago
..
Makefile	…
asm-offsets.c	…
entry.S	score: fix off-by-one index into syscall table	13 years ago
head.S	…
init_task.c	…
irq.c	score: Use generic show_interrupts()	14 years ago
module.c	modules: make arch's use default loader hooks	14 years ago
process.c	…
ptrace.c	…
setup.c	score: Use HAVE_MEMBLOCK_NODE_MAP	13 years ago
signal.c	…
sys_call_table.c	…
sys_score.c	…
time.c	…
traps.c	…
vmlinux.lds.S	…