The patch titled Subject: exec-separate-mm_anonpages-and-rlimit_stack-accounting-fix has been added to the -mm tree. Its filename is exec-separate-mm_anonpages-and-rlimit_stack-accounting-fix.patch This patch should soon appear at http://ozlabs.org/~akpm/mmots/broken-out/exec-separate-mm_anonpages-and-rlimit_stack-accounting-fix.patch and later at http://ozlabs.org/~akpm/mmotm/broken-out/exec-separate-mm_anonpages-and-rlimit_stack-accounting-fix.patch Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next and is updated there every 3-4 working days ------------------------------------------------------ From: Oleg Nesterov <oleg@xxxxxxxxxx> Subject: exec-separate-mm_anonpages-and-rlimit_stack-accounting-fix I forgot about the !CONFIG_MMU version of get_arg_page() which doesn't check RLIMIT_STACK at all. Link: http://lkml.kernel.org/r/20181126122307.GA1660@xxxxxxxxxx Tested-by: Guenter Roeck <linux@xxxxxxxxxxxx> Cc: Kees Cook <keescook@xxxxxxxxxxxx> Cc: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx> Cc: Michal Hocko <mhocko@xxxxxxxx> Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> --- --- a/fs/exec.c~exec-separate-mm_anonpages-and-rlimit_stack-accounting-fix +++ a/fs/exec.c @@ -527,8 +527,10 @@ static int copy_strings(int argc, struct pos = bprm->p; str += len; bprm->p -= len; +#ifdef CONFIG_MMU if (bprm->p < bprm->argmin) goto out; +#endif while (len > 0) { int offset, bytes_to_copy; _ Patches currently in -mm which might be from oleg@xxxxxxxxxx are exec-load_script-dont-blindly-truncate-shebang-string.patch exec-increase-binprm_buf_size-to-256.patch exec-separate-mm_anonpages-and-rlimit_stack-accounting.patch exec-separate-mm_anonpages-and-rlimit_stack-accounting-fix.patch