Messages in this thread |  | | Date | Fri, 16 Mar 2001 14:05:58 +0100 | | From | Jamie Lokier <> | | Subject | Re: [CHECKER] 9 potential copy_*_user bugs in 2.4.1 |
| |
Alexander Viro wrote: > * verify_area() cleans the value, but you'll be better off > considering these as dangerous - it only checks that range is OK and if > pointer arithmetics moves you out of that range or you access piece longer > than range in question...
Note that verify_area's argument cannot be safely dereferenced if a parallel thread is able to change the user-space mapping. This is usually possible.
-- Jamie - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|  |