diff options
| author | Suren Baghdasaryan <surenb@google.com> | 2020-01-28 00:56:16 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2020-02-10 17:49:11 +0100 |
| commit | 6d67b0290b4b84c477e6a2fc6e005e174d3c7786 (patch) | |
| tree | c077940131b26debb4102649c5d97564cc0cb6eb /net/core/stream.c | |
| parent | staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi. (diff) | |
| download | linux-6d67b0290b4b84c477e6a2fc6e005e174d3c7786.tar.xz linux-6d67b0290b4b84c477e6a2fc6e005e174d3c7786.zip | |
staging: android: ashmem: Disallow ashmem memory from being remapped
When ashmem file is mmapped, the resulting vma->vm_file points to the
backing shmem file with the generic fops that do not check ashmem
permissions like fops of ashmem do. If an mremap is done on the ashmem
region, then the permission checks will be skipped. Fix that by disallowing
mapping operation on the backing shmem file.
Reported-by: Jann Horn <jannh@google.com>
Signed-off-by: Suren Baghdasaryan <surenb@google.com>
Cc: stable <stable@vger.kernel.org> # 4.4,4.9,4.14,4.18,5.4
Signed-off-by: Todd Kjos <tkjos@google.com>
Reviewed-by: Joel Fernandes (Google) <joel@joelfernandes.org>
Link: https://lore.kernel.org/r/20200127235616.48920-1-tkjos@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'net/core/stream.c')
0 files changed, 0 insertions, 0 deletions