On Mon, Sep 18, 2023 at 07:39:51AM +0000, 张子勋(Zhang Zixun) wrote: > Hi, > There is a null pointer dereference DoS issue when I use lseek syscall to inode with proc_ops. > I find the root cause is https://lore.kernel.org/all/YFYX0Bzwxlc7aBa%2F@localhost.localdomain/ . > In this patch, the lseek syscall is set to mandatory. So, if proc_lseek is not set in proc_ops, pde->proc_ops->proc_lseek will get a null pointer. > I want to know why all inode in proc need to set its own lseek, and why set default_llseek in pde_lseek isn’t a good idea? > By the way, although every inode need set a lseek to use lseek syscall, lseek to a inode without lseek should get a fail return and the kernel should’t panic. It removes 1 branch and make code smaller too. You can switch to nonseekable_open() if you don't need lseeks.
