summaryrefslogtreecommitdiffstats
path: root/fs/userfaultfd.c
diff options
context:
space:
mode:
authorKees Cook <keescook@chromium.org>2017-08-02 22:32:21 +0200
committerLinus Torvalds <torvalds@linux-foundation.org>2017-08-03 02:16:12 +0200
commitade9f91b32b964e83d294f4973d50083b08ef6fc (patch)
treebd40eaa291b03bb8a46188358cf9f4f74064de5c /fs/userfaultfd.c
parentcpuset: fix a deadlock due to incomplete patching of cpusets_enabled() (diff)
downloadlinux-ade9f91b32b964e83d294f4973d50083b08ef6fc.tar.xz
linux-ade9f91b32b964e83d294f4973d50083b08ef6fc.zip
ipc: add missing container_of()s for randstruct
When building with the randstruct gcc plugin, the layout of the IPC structs will be randomized, which requires any sub-structure accesses to use container_of(). The proc display handlers were missing the needed container_of()s since the iterator is passing in the top-level struct kern_ipc_perm. This would lead to crashes when running the "lsipc" program after the system had IPC registered (e.g. after starting up Gnome): general protection fault: 0000 [#1] PREEMPT SMP ... RIP: 0010:shm_add_rss_swap.isra.1+0x13/0xa0 ... Call Trace: sysvipc_shm_proc_show+0x5e/0x150 sysvipc_proc_show+0x1a/0x30 seq_read+0x2e9/0x3f0 ... Link: http://lkml.kernel.org/r/20170730205950.GA55841@beast Fixes: 3859a271a003 ("randstruct: Mark various structs for randomization") Signed-off-by: Kees Cook <keescook@chromium.org> Reported-by: Dominik Brodowski <linux@dominikbrodowski.net> Acked-by: Davidlohr Bueso <dave@stgolabs.net> Acked-by: Manfred Spraul <manfred@colorfullife.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'fs/userfaultfd.c')
0 files changed, 0 insertions, 0 deletions