Re: Potenitial security hole in the kernel

[Philip Blundell]

>Suppose the signal handler modifies this context frame for example by
>storing into the PC slot address of the panic routine
>then when handler will exit  panic will be called with obvious results.

You can't execute panic() - or any other kernel function - in user mode.
The application can write what it likes into its sigcontext, and the worst 
that will hapenn is that it will crash itself.

p.

PGP signature