[lkml]   [2009]   [Sep]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH 9/9] Add explicit bound checks in net/socket.c
    From: Arjan van de Ven <>
    Date: Sat, 26 Sep 2009 21:23:02 +0200

    > The sys_socketcall() function has a very clever system for the copy
    > size of its arguments. Unfortunately, gcc cannot deal with this in
    > terms of proving that the copy_from_user() is then always in bounds.
    > This is the last (well 9th of this series, but last in the kernel) such
    > case around.
    > With this patch, we can turn on code to make having the boundary provably
    > right for the whole kernel, and detect introduction of new security
    > accidents of this type early on.
    > Signed-off-by: Arjan van de Ven <>

    Applied, thanks.

     \ /
      Last update: 2009-09-28 21:59    [W:0.037 / U:6.388 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site