Re: user pointer bugs

2007-01-15 Thread Jan Engelhardt
On Jan 14 2007 15:58, Suhabe Bugrara wrote: > > In linux-2.6.19.2, do the following lines have bugs in them? It looks > like they dereference a user pointer without first being checked by > the "access_ok" macro to ensure that they point into userspace. > > Suhabe > > > Fi

user pointer bugs

2007-01-14 Thread Suhabe Bugrara
Hello, In linux-2.6.19.2, do the following lines have bugs in them? It looks like they dereference a user pointer without first being checked by the "access_ok" macro to ensure that they point into userspace. Suhabe File: sound/isa/sscape.c Lines: 550, 665 Description:

[CHECKER] user-pointer bugs in 2.4.4 and 2.4.4-ac8

2001-05-24 Thread Dawson Engler
Hi All, Enclosed are 10 probable security holes where code treats a pointer as a bad user pointer in one place (by passing it as an argument to a *_user or verify_area routine) but then dereferences it, or passes it to a routine that does dereference it somewhere else. We've reported many of the