Re: [kernel-hardening] [PATCH v2 26/30] fork: Provide usercopy whitelisting for task_struct

2017-08-30 Thread Rik van Riel
On Mon, 2017-08-28 at 14:35 -0700, Kees Cook wrote: > While the blocked and saved_sigmask fields of task_struct are copied > to > userspace (via sigmask_to_save() and setup_rt_frame()), it is always > copied with a static length (i.e. sizeof(sigset_t)). > > The only portion of task_struct that is

Re: [kernel-hardening] [PATCH v2 26/30] fork: Provide usercopy whitelisting for task_struct

2017-08-30 Thread Rik van Riel
On Mon, 2017-08-28 at 14:35 -0700, Kees Cook wrote: > While the blocked and saved_sigmask fields of task_struct are copied > to > userspace (via sigmask_to_save() and setup_rt_frame()), it is always > copied with a static length (i.e. sizeof(sigset_t)). > > The only portion of task_struct that is