[lkml]   [2010]   [Jul]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectQuestion about binfmt_elf.c
    Could somebody please update this comment to explain why fiddling with 
    strangely protected bss is _not_ an easy way to leak arbitrary amounts of
    uninitalized kernel memory (with whatever previous contents they have) to

    nbyte = ELF_PAGEOFFSET(elf_bss);
    if (nbyte) {
    nbyte = ELF_MIN_ALIGN - nbyte;
    if (nbyte > elf_brk - elf_bss)
    nbyte = elf_brk - elf_bss;
    if (clear_user((void __user *)elf_bss +
    load_bias, nbyte)) {
    * This bss-zeroing can fail if the ELF
    * file specifies odd protections. So
    * we don't check the return value

    Just curious. Reading through the code and trying to understand it...

    GPLv3: as worthy a successor as The Phantom Meanace, as timely as Duke Nukem
    Forever, and as welcome as New Coke.

     \ /
      Last update: 2010-07-16 22:15    [W:0.028 / U:19.256 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site