[lkml]   [1996]   [May]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: As 2.0 looms
In article <>,
Alan Cox <> wrote:
>> Quick fix in .96, but breaks at least some versions of strace. Changed
>> in .98 - strace works again, but I think there may be a race condition
>> if read() passes the checks, sleeps on memcpy_tofs() due to a swap-in,
>> and the target process execs a setuid program in this time window.
>Thats bad because with an nfs program and a PC on the lan you can use for
>flooding it becomes quite a wide window.

No the target program must be PTRACE_ATTACHed and it must also be
in a _stopped_ state. So there is no way for it to continue
running and do an exec or whatever.

+ Miquel van Smoorenburg + Cistron Internet Services + Living is a |
| (SP6) | Independent Dutch ISP | horizontal |
+ + + fall +

 \ /
  Last update: 2005-03-22 13:37    [W:0.071 / U:0.968 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site