Date: Sat, 26 Dec 2015 09:04:47 +0000 (UTC) From: Dmitry Chagin <dchagin@FreeBSD.org> To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: svn commit: r292743 - head/sys/compat/linux Message-ID: <201512260904.tBQ94lpV055555@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: dchagin Date: Sat Dec 26 09:04:47 2015 New Revision: 292743 URL: https://svnweb.freebsd.org/changeset/base/292743 Log: Do not allow access to emuldata for non Linux processes. Pointed out by: mjg@ Security: https://admbugs.freebsd.org/show_bug.cgi?id=679 Modified: head/sys/compat/linux/linux_futex.c Modified: head/sys/compat/linux/linux_futex.c ============================================================================== --- head/sys/compat/linux/linux_futex.c Sat Dec 26 06:13:01 2015 (r292742) +++ head/sys/compat/linux/linux_futex.c Sat Dec 26 09:04:47 2015 (r292743) @@ -1099,6 +1099,8 @@ linux_get_robust_list(struct thread *td, ESRCH); return (ESRCH); } + if (SV_PROC_ABI(td2->td_proc) != SV_ABI_LINUX) + return (EPERM); em = em_find(td2); KASSERT(em != NULL, ("get_robust_list: emuldata notfound.\n"));
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201512260904.tBQ94lpV055555>