+ coredump-fixes-core_pipe_limit-sysctl-proc_handler.patch added to mm-nonmm-unstable branch

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



The patch titled
     Subject: coredump: fix core_pipe_limit sysctl proc_handler
has been added to the -mm mm-nonmm-unstable branch.  Its filename is
     coredump-fixes-core_pipe_limit-sysctl-proc_handler.patch

This patch will shortly appear at
     https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patches/coredump-fixes-core_pipe_limit-sysctl-proc_handler.patch

This patch will later appear in the mm-nonmm-unstable branch at
    git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

Before you just go and hit "reply", please:
   a) Consider who else should be cc'ed
   b) Prefer to cc a suitable mailing list as well
   c) Ideally: find the original patch on the mailing list and do a
      reply-to-all to that, adding suitable additional cc's

*** Remember to use Documentation/process/submit-checklist.rst when testing your code ***

The -mm tree is included into linux-next via the mm-everything
branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
and is updated there every 2-3 working days

------------------------------------------------------
From: Nicolas Bouchinet <nicolas.bouchinet@xxxxxxxxxxx>
Subject: coredump: fix core_pipe_limit sysctl proc_handler
Date: Wed, 15 Jan 2025 14:22:08 +0100

Patch series " Fixes multiple sysctl proc_handler usage error", v4.

While reading sysctl code I encountered two sysctl proc_handler parameters
common errors.

The first one is to declare .data as a different type thant the return of
the used .proc_handler, i.e.  using proch_dointvec, thats convert a char
string to signed integers, and storing the result in a .data that is
backed by an unsigned int.  User can then write "-1" string, which results
in a different value stored in the .data variable.  This can lead to type
conversion errors in branches and thus to potential security issues.


[Index of Archives]     [Kernel Archive]     [IETF Annouce]     [DCCP]     [Netdev]     [Networking]     [Security]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux SCSI]

  Powered by Linux