From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752853Ab2L2LBx (ORCPT ); Sat, 29 Dec 2012 06:01:53 -0500 Received: from mailhub.sw.ru ([195.214.232.25]:10535 "EHLO relay.sw.ru" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752728Ab2L2LBu (ORCPT ); Sat, 29 Dec 2012 06:01:50 -0500 From: Andrey Vagin To: linux-kernel@vger.kernel.org Cc: Andrey Vagin , Andrew Morton , Kees Cook , Cyrill Gorcunov , Serge Hallyn , "Eric W. Biederman" , Eric Paris , James Morris Subject: [PATCH] prctl: fix validation of an address Date: Sat, 29 Dec 2012 15:00:10 +0400 Message-Id: <1356778810-20879-1-git-send-email-avagin@openvz.org> X-Mailer: git-send-email 1.7.11.7 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org The address should be bigger than dac_mmap_min_addr, because a process with CAP_RAWIO can map a vma bellow mmap_min_addr. Cc: Andrew Morton Cc: Kees Cook Cc: Cyrill Gorcunov Cc: Serge Hallyn Cc: "Eric W. Biederman" Cc: Eric Paris Cc: James Morris Signed-off-by: Andrey Vagin --- kernel/sys.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/sys.c b/kernel/sys.c index 265b376..e0e1bbd 100644 --- a/kernel/sys.c +++ b/kernel/sys.c @@ -1868,7 +1868,7 @@ static int prctl_set_mm(int opt, unsigned long addr, if (opt == PR_SET_MM_EXE_FILE) return prctl_set_mm_exe_file(mm, (unsigned int)addr); - if (addr >= TASK_SIZE || addr < mmap_min_addr) + if (addr >= TASK_SIZE || addr < dac_mmap_min_addr) return -EINVAL; error = -EINVAL; -- 1.7.11.7