Re: [PATCH] seccomp: fix UAF in user-trap code

2019-01-15 Thread James Morris
On Sat, 12 Jan 2019, Kees Cook wrote: > This makes sense to me. Thanks for fixing it! > > Acked-by: Kees Cook > > James, can you add this to your fixes tree for sending to Linus? Sure. -- James Morris

Re: [PATCH] seccomp: fix UAF in user-trap code

2019-01-12 Thread Kees Cook
On Sat, Jan 12, 2019 at 10:24 AM Tycho Andersen wrote: > > On the failure path, we do an fput() of the listener fd if the filter fails > to install (e.g. because of a TSYNC race that's lost, or if the thread is > killed, etc.). fput() doesn't actually release the fd, it just ads it to a > work que