From: Marc-Christian Petersen <m.c.p@gmx.net>
To: Matthew Grant <grantma@anathoth.gen.nz>,
debian-security@lists.debian.org, linux-kernel@vger.kernel.org,
bugtraq@lists.securityfocus.com, lwn@lwn.net, alan@redhat.com,
Herbert Xu <herbert@debian.org>
Subject: Re: [PATCH] ALERT!! - 2.2.x i386 Linux kernel has DoS same as 2.4.x!!!!
Date: Tue, 19 Nov 2002 23:21:15 +0100 [thread overview]
Message-ID: <200211192320.09956.m.c.p@gmx.net> (raw)
In-Reply-To: <1037744004.10197.5.camel@luther>
[-- Attachment #1: Type: text/plain, Size: 396 bytes --]
On Tuesday 19 November 2002 23:13, Matthew Grant wrote:
Hi Matt,
> Here is the patch to fix 2.2:
consider using this instead.
--
Kind regards
Marc-Christian Petersen
http://sourceforge.net/projects/wolk
PGP/GnuPG Key: 1024D/569DE2E3DB441A16
Fingerprint: 3469 0CF8 CA7E 0042 7824 080A 569D E2E3 DB44 1A16
Key available at www.keyserver.net. Encrypted e-mail preferred.
[-- Attachment #2: 2.2.22-fix-local-DoS.patch --]
[-- Type: text/x-diff, Size: 1372 bytes --]
diff -urN linux.orig/arch/i386/kernel/entry.S linux/arch/i386/kernel/entry.S
--- linux.orig/arch/i386/kernel/entry.S Tue May 21 01:32:34 2002
+++ linux/arch/i386/kernel/entry.S Thu Nov 14 21:39:36 2002
@@ -63,7 +63,9 @@
OLDSS = 0x38
CF_MASK = 0x00000001
+TF_MASK = 0x00000100
IF_MASK = 0x00000200
+DF_MASK = 0x00000400
NT_MASK = 0x00004000
VM_MASK = 0x00020000
@@ -139,6 +141,9 @@
movl CS(%esp),%edx # this is eip..
movl EFLAGS(%esp),%ecx # and this is cs..
movl %eax,EFLAGS(%esp) #
+ andl $~(NT_MASK|TF_MASK|DF_MASK), %eax
+ pushl %eax
+ popfl
movl %edx,EIP(%esp) # Now we move them to their "normal" places
movl %ecx,CS(%esp) #
movl %esp,%ebx
@@ -256,6 +261,9 @@
pushl $ SYMBOL_NAME(do_divide_error)
ALIGN
error_code:
+ pushfl
+ andl $~(NT_MASK|TF_MASK|DF_MASK), (%esp)
+ popfl
pushl %ds
pushl %eax
xorl %eax,%eax
@@ -266,7 +274,6 @@
decl %eax # eax = -1
pushl %ecx
pushl %ebx
- cld
movl %es,%cx
movl ORIG_EAX(%esp), %esi # get the error code
movl ES(%esp), %edi # get the function address
diff -urN linux.orig/arch/i386/kernel/traps.c linux/arch/i386/kernel/traps.c
--- linux.orig/arch/i386/kernel/traps.c Thu Nov 14 21:19:40 2002
+++ linux/arch/i386/kernel/traps.c Thu Nov 14 21:40:01 2002
@@ -601,7 +601,7 @@
return;
clear_TF:
- regs->eflags &= ~TF_MASK;
+ regs->eflags &= ~(TF_MASK|NT_MASK);
return;
}
prev parent reply other threads:[~2002-11-19 22:19 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-11-19 22:13 Matthew Grant
2002-11-19 22:21 ` Marc-Christian Petersen [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200211192320.09956.m.c.p@gmx.net \
--to=m.c.p@gmx.net \
--cc=alan@redhat.com \
--cc=bugtraq@lists.securityfocus.com \
--cc=debian-security@lists.debian.org \
--cc=grantma@anathoth.gen.nz \
--cc=herbert@debian.org \
--cc=linux-kernel@vger.kernel.org \
--cc=lwn@lwn.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
Powered by JetHome