lkml.org 
[lkml]   [2005]   [Sep]   [27]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [linux-usb-devel] Re: [Security] [vendor-sec] [BUG/PATCH/RFC] Oops while completing async USB via usbdevio
    From
    Date
    On Maw, 2005-09-27 at 09:09 -0700, Linus Torvalds wrote:
    > > root-owned), then the urb completes, and kill_proc_info() sends the
    > > signal to the unsuspecting process.
    >
    > Ehh.. pid's don't get re-used until they wrap.

    Which doesn't take very long to arrange. Relying on pids is definitely a
    security problem we don't want to make worse than it already is.

    > If you look it up by pid, it won't be stale, now will it?

    Just potentially wrong, but if it uses the SIGIO code and the SIGIO code
    is fixed then it works out.

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-09-27 18:33    [W:0.021 / U:29.596 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site