Peter Hurley 88b9e456b1 ipc: don't allocate a copy larger than max ...

When MSG_COPY is set, a duplicate message must be allocated for the copy
before locking the queue.  However, the copy could not be larger than was
sent which is limited to msg_ctlmax.

Signed-off-by: Peter Hurley <peter@hurleysoftware.com>
Acked-by: Stanislav Kinsbursky <skinsbursky@parallels.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2013-03-08 15:05:33 -08:00

..

compat_mq.c

…

compat.c

selftests: IPC message queue copy feature test

2013-01-04 16:11:45 -08:00

ipc_sysctl.c

ipc: add sysctl to specify desired next object id

2013-01-04 16:11:45 -08:00

ipcns_notifier.c

…

Makefile

…

mq_sysctl.c

…

mqueue.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-02-26 20:16:07 -08:00

msg.c

ipc: don't allocate a copy larger than max

2013-03-08 15:05:33 -08:00

msgutil.c

ipc: fix potential oops when src msg > 4k w/ MSG_COPY

2013-03-08 15:05:33 -08:00

namespace.c

…

sem.c

…

shm.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-02-26 20:16:07 -08:00

syscall.c

…

util.c

ipc: convert to idr_alloc()

2013-02-27 19:10:19 -08:00

util.h

ipc: introduce message queue copy feature

2013-01-04 16:11:45 -08:00