This is a note to let you know that I've just added the patch titled
proc: do proper range check on readdir offset
to the 2.6.38-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
proc-do-proper-range-check-on-readdir-offset.patch
and it can be found in the queue-2.6.38 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <[email protected]> know about it.
>From d8bdc59f215e62098bc5b4256fd9928bf27053a1 Mon Sep 17 00:00:00 2001
From: Linus Torvalds <[email protected]>
Date: Mon, 18 Apr 2011 10:36:54 -0700
Subject: proc: do proper range check on readdir offset
From: Linus Torvalds <[email protected]>
commit d8bdc59f215e62098bc5b4256fd9928bf27053a1 upstream.
Rather than pass in some random truncated offset to the pid-related
functions, check that the offset is in range up-front.
This is just cleanup, the previous commit fixed the real problem.
Signed-off-by: Linus Torvalds <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
---
fs/proc/base.c | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
--- a/fs/proc/base.c
+++ b/fs/proc/base.c
@@ -3066,11 +3066,16 @@ static int proc_pid_fill_cache(struct fi
/* for the /proc/ directory itself, after non-process stuff has been done */
int proc_pid_readdir(struct file * filp, void * dirent, filldir_t filldir)
{
- unsigned int nr = filp->f_pos - FIRST_PROCESS_ENTRY;
- struct task_struct *reaper =
get_proc_task(filp->f_path.dentry->d_inode);
+ unsigned int nr;
+ struct task_struct *reaper;
struct tgid_iter iter;
struct pid_namespace *ns;
+ if (filp->f_pos >= PID_MAX_LIMIT + TGID_OFFSET)
+ goto out_no_task;
+ nr = filp->f_pos - FIRST_PROCESS_ENTRY;
+
+ reaper = get_proc_task(filp->f_path.dentry->d_inode);
if (!reaper)
goto out_no_task;
Patches currently in stable-queue which might be from
[email protected] are
queue-2.6.38/kstrto-converting-strings-to-integers-done-hopefully-right.patch
queue-2.6.38/proc-do-proper-range-check-on-readdir-offset.patch
queue-2.6.38/ramfs-fix-memleak-on-no-mmu-arch.patch
queue-2.6.38/brk-compat_brk-fix-detection-of-randomized-brk.patch
queue-2.6.38/vmscan-all_unreclaimable-use-zone-all_unreclaimable-as-a-name.patch
queue-2.6.38/mm-thp-use-conventional-format-for-boolean-attributes.patch
queue-2.6.38/maintainers-update-stable-branch-info.patch
queue-2.6.38/next_pidmap-fix-overflow-condition.patch
queue-2.6.38/vfs-fix-absolute-rcu-path-walk-failures-due-to-uninitialized-seq-number.patch
queue-2.6.38/vm-fix-vm_pgoff-wrap-in-stack-expansion.patch
queue-2.6.38/oom-kill-remove-boost_dying_task_prio.patch
queue-2.6.38/vm-fix-mlock-on-stack-guard-page.patch
_______________________________________________
stable mailing list
[email protected]
http://linux.kernel.org/mailman/listinfo/stable
