Messages in this thread | | | Date | Thu, 28 Oct 2010 00:30:12 +0100 | From | Al Viro <> | Subject | Re: situation with signals |
| |
On Wed, Oct 27, 2010 at 06:51:12PM -0400, Chris Metcalf wrote:
> > BTW, is everything in your pt_regs safe to modify? > > What an interesting observation. :-) In fact, it would be possible to > overwrite the privilege level (the ex1 register) from within the signal > handler and then return to run arbitrary code at kernel PL. I'll fix it.
Then you need to be careful with that in your ptrace as well (POKEUSR and SETREGS).
| |