Messages in this thread |  | | | Date | Fri, 18 Mar 2005 00:15:51 -0800 (PST) | | From | Yichen Xie <> | | Subject | Potential DOS in load_elf_library? |
| |
Hi guys, I was looking at the load_elf_library function (fs/binfmt_elf.c) in 2.6.10, and noticed the following:
elf_phdata = (struct elf_phdr *) kmalloc(j, GFP_KERNEL); ... while (elf_phdata->p_type != PT_LOAD) elf_phdata++; ... kfree(elf_phdata); Could this be problematic since the pointer being freed might be different from that returned from kmalloc? - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|  |