From: Rasmus Villemoes <linux@rasmusvillemoes.dk>
To: Andrew Morton <akpm@linux-foundation.org>
Cc: linux-mm@kvack.org, linux-kernel@vger.kernel.org
Subject: Re: [PATCH] mm: mremap: validate input before taking lock
Date: Thu, 06 Jun 2013 00:32:19 +0000 [thread overview]
Message-ID: <u0lk3m83wq4.fsf@orc02.imf.au.dk> (raw)
In-Reply-To: <1370000443-5906-1-git-send-email-linux@rasmusvillemoes.dk> (Rasmus Villemoes's message of "Fri, 31 May 2013 11:40:43 +0000")
Ping...
Rasmus Villemoes <linux@rasmusvillemoes.dk> writes:
> This patch is very similar to 84d96d897671: Perform some basic
> validation of the input to mremap() before taking the
> ¤t->mm->mmap_sem lock. This also makes the MREMAP_FIXED =>
> MREMAP_MAYMOVE dependency slightly more explicit.
>
> Signed-off-by: Rasmus Villemoes <linux@rasmusvillemoes.dk>
> ---
> mm/mremap.c | 18 ++++++++++--------
> 1 file changed, 10 insertions(+), 8 deletions(-)
>
> diff --git a/mm/mremap.c b/mm/mremap.c
> index 463a257..00b6905 100644
> --- a/mm/mremap.c
> +++ b/mm/mremap.c
> @@ -456,13 +456,14 @@ SYSCALL_DEFINE5(mremap, unsigned long, addr, unsigned long, old_len,
> unsigned long charged = 0;
> bool locked = false;
>
> - down_write(¤t->mm->mmap_sem);
> -
> if (flags & ~(MREMAP_FIXED | MREMAP_MAYMOVE))
> - goto out;
> + return ret;
> +
> + if (flags & MREMAP_FIXED && !(flags & MREMAP_MAYMOVE))
> + return ret;
>
> if (addr & ~PAGE_MASK)
> - goto out;
> + return ret;
>
> old_len = PAGE_ALIGN(old_len);
> new_len = PAGE_ALIGN(new_len);
> @@ -473,12 +474,13 @@ SYSCALL_DEFINE5(mremap, unsigned long, addr, unsigned long, old_len,
> * a zero new-len is nonsensical.
> */
> if (!new_len)
> - goto out;
> + return ret;
> +
> + down_write(¤t->mm->mmap_sem);
>
> if (flags & MREMAP_FIXED) {
> - if (flags & MREMAP_MAYMOVE)
> - ret = mremap_to(addr, old_len, new_addr, new_len,
> - &locked);
> + ret = mremap_to(addr, old_len, new_addr, new_len,
> + &locked);
> goto out;
> }
>
> --
> 1.7.9.5
>
> --
> To unsubscribe, send a message with 'unsubscribe linux-mm' in
> the body to majordomo@kvack.org. For more info on Linux MM,
> see: http://www.linux-mm.org/ .
> Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>
>
--
Rasmus Villemoes
<http://rasmusvillemoes.dk/>
--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org. For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>
prev parent reply other threads:[~2013-06-06 0:32 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-05-31 11:40 Rasmus Villemoes
2013-06-06 0:32 ` Rasmus Villemoes [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=u0lk3m83wq4.fsf@orc02.imf.au.dk \
--to=linux@rasmusvillemoes.dk \
--cc=akpm@linux-foundation.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-mm@kvack.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox