Alexey Kuznetsov 1fca16492a [PATCH] IPC: access to unmapped vmalloc area in grow_ary() ...

grow_ary() should not copy struct ipc_id_ary (it copies new->p, not
new). Due to this, memcpy() src pointer could hit unmapped vmalloc page
when near page boundary.

Found during OpenVZ stress testing

Signed-off-by: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
Signed-off-by: Kirill Korotaev <dev@openvz.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2006-04-24 09:56:05 -07:00

..

compat_mq.c

…

compat.c

[PATCH] compat: be more consistent about [ug]id_t

2005-09-07 16:57:19 -07:00

Makefile

…

mqueue.c

[NETLINK]: Fix a severe bug

2006-02-09 16:43:38 -08:00

msg.c

correct email address of Manfred Spraul

2006-01-15 02:43:54 +01:00

msgutil.c

…

sem.c

correct email address of Manfred Spraul

2006-01-15 02:43:54 +01:00

shm.c

[PATCH] shmat: stop mprotect from giving write permission to a readonly attachment (CVE-2006-1524)

2006-04-17 13:16:07 -07:00

util.c

[PATCH] IPC: access to unmapped vmalloc area in grow_ary()

2006-04-24 09:56:05 -07:00

util.h

correct email address of Manfred Spraul

2006-01-15 02:43:54 +01:00