Hi, This pair of patches replaces the last patch in this[1] series. Perform bprm argument overflow checking but only do argmin checks for MMU systems. To avoid tripping over this again, argmin is explicitly defined only for CONFIG_MMU. Thank you to Guenter Roeck for finding this issue (again)! -Kees [1] https://lore.kernel.org/all/20240520021337.work.198-kees@xxxxxxxxxx/ Kees Cook (2): execve: Keep bprm->argmin behind CONFIG_MMU exec: Avoid pathological argc, envc, and bprm->p values fs/exec.c | 36 +++++++++++++++++++++++++++++------- fs/exec_test.c | 30 +++++++++++++++++++++++++++++- include/linux/binfmts.h | 2 +- 3 files changed, 59 insertions(+), 9 deletions(-) -- 2.34.1
