GitHub-Mirror/linux-bl808
2
0
Fork 0
mirror of https://github.com/Fishwaldo/linux-bl808.git synced 2025-03-31 11:24:37 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

audit: fix two bugs in the new execve audit code

Browse source 
copy_from_user() returns the number of bytes not copied, hence 0 is the
expected output.

axi->mm might not be valid anymore when not equal to current->mm, do not
dereference before checking that - thanks to Al for spotting that.

Signed-off-by: Peter Zijlstra <a.p.zijlstra@chello.nl>
Tested-by: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
This commit is contained in:
Peter Zijlstra 2007-07-28 00:55:18 +02:00 • committed by Linus Torvalds
parent 0af3678f7c
commit 040b3a2df2
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
kernel/auditsc.c
View file

@ -824,12 +824,14 @@ static void audit_log_execve_info(struct audit_buffer *ab,
{ {
int i; int i;
long len, ret; long len, ret;
const char __user *p = (const char __user *)axi->mm->arg_start; const char __user *p;
char *buf; char *buf;
if (axi->mm != current->mm) if (axi->mm != current->mm)
return; /* execve failed, no additional info */ return; /* execve failed, no additional info */
p = (const char __user *)axi->mm->arg_start;
for (i = 0; i < axi->argc; i++, p += len) { for (i = 0; i < axi->argc; i++, p += len) {
len = strnlen_user(p, MAX_ARG_STRLEN); len = strnlen_user(p, MAX_ARG_STRLEN);
/* /*
@ -855,7 +857,7 @@ static void audit_log_execve_info(struct audit_buffer *ab,
* copied them here, and the mm hasn't been exposed to user- * copied them here, and the mm hasn't been exposed to user-
* space yet. * space yet.
*/ */
if (!ret) { if (ret) {
WARN_ON(1); WARN_ON(1);
send_sig(SIGKILL, current, 0); send_sig(SIGKILL, current, 0);
} }