linux/ipc
Alexey Kuznetsov a9a5cd5d2a [PATCH] IPC: access to unmapped vmalloc area in grow_ary()
grow_ary() should not copy struct ipc_id_ary (it copies new->p, not
new). Due to this, memcpy() src pointer could hit unmapped vmalloc page
when near page boundary.

Found during OpenVZ stress testing

Signed-off-by: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
Signed-off-by: Kirill Korotaev <dev@openvz.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2006-04-17 18:40:40 -07:00
..
compat_mq.c
compat.c
Makefile
mqueue.c
msg.c
msgutil.c
sem.c
shm.c [PATCH] shmat: stop mprotect from giving write permission to a readonly attachment (CVE-2006-1524) 2006-04-17 14:24:58 -07:00
util.c [PATCH] IPC: access to unmapped vmalloc area in grow_ary() 2006-04-17 18:40:40 -07:00
util.h