Quoting Oren Laadan (orenl@xxxxxxxxxxxxxxx): > > One last thought - should there be an explicit check to make sure that > > if CLONE_NEWPID, then at the end pid[knum_pids+1] = 0? Or is that > > there and I just missed it? > > the wonders of kzalloc() ... No. I'm saying that I don't see anything stopping the user from doing CLONE_NEWPID while specifying an extra pid, so that they end up trying to create a pidns init with vpid 5 -serge _______________________________________________ Containers mailing list Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linux-foundation.org/mailman/listinfo/containers