Messages in this thread | | | Subject | Re: mremap() bug IMHO not in 2.2 | From | Valdis.Kletnieks@vt ... | Date | Mon, 05 Jan 2004 18:58:32 -0500 |
| |
On Mon, 05 Jan 2004 15:36:41 PST, Linus Torvalds said:
> So yes, it creates some confusion in the VM layer, but it all seems > benign. It's clearly a bug, but where does the security problem come in?
Just guessing, but would a zero-length vma be rounded up to a page, and thus give the attacker scribble permission on a page he shouldn't have had?
[unhandled content-type:application/pgp-signature] | |