Re: [PATCH] splice: missing user pointer access verification (CVE-2008-0009/10)

On Fri, Feb 08, 2008 at 06:48:54PM +0100, Oliver Pinter wrote: > greg it's for .22 or the splice is changed between .22 and .23? splice changed for .23 and this only affects .23 and older kernels, so .22 and older kernels do not have issues. thanks, greg k-h -- To unsubscribe from this list: sen

Re: [PATCH] splice: missing user pointer access verification (CVE-2008-0009/10)

hmm, when I good see, this is not for .22, and it (vmsplice_to_user) is came with .23 On 2/8/08, Oliver Pinter <[EMAIL PROTECTED]> wrote: > greg it's for .22 or the splice is changed between .22 and .23? > > On 2/8/08, Greg KH <[EMAIL PROTECTED]> wrote: > > From: Jens Axboe <[EMAIL PROTECTED]> > >

Re: [PATCH] splice: missing user pointer access verification (CVE-2008-0009/10)

greg it's for .22 or the splice is changed between .22 and .23? On 2/8/08, Greg KH <[EMAIL PROTECTED]> wrote: > From: Jens Axboe <[EMAIL PROTECTED]> > > vmsplice_to_user() must always check the user pointer and length > with access_ok() before copying. Likewise, for the slow path of > copy_from_us

[PATCH] splice: missing user pointer access verification (CVE-2008-0009/10)

From: Jens Axboe <[EMAIL PROTECTED]> vmsplice_to_user() must always check the user pointer and length with access_ok() before copying. Likewise, for the slow path of copy_from_user_mmap_sem() we need to check that we may read from the user region. Signed-off-by: Jens Axboe <[EMAIL PROTECTED]> Cc: