On Fri, Mar 04, 2005 at 01:16:57PM -0800, [EMAIL PROTECTED] wrote:

> Signed-off-by: Yoichi Yuasa <[EMAIL PROTECTED]>
> Signed-off-by: Andrew Morton <[EMAIL PROTECTED]>

> @@ -307,7 +308,7 @@ asmlinkage void do_syscall_trace(struct 
>  {
>       if (unlikely(current->audit_context)) {
>               if (!entryexit)
> -                     audit_syscall_entry(current, regs->orig_eax,
> +                     audit_syscall_entry(current, regs->regs[2],

Wrong.  regs[2] can will contain the syscall return value and can be
modified by ptrace also.

  Ralf
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Reply via email to