diff options
| author | Oleg Nesterov <oleg@redhat.com> | 2024-09-29 16:42:58 +0200 |
|---|---|---|
| committer | Peter Zijlstra <peterz@infradead.org> | 2024-10-07 09:28:45 +0200 |
| commit | c16e2fdd746c78f5b2ce3c2ab8a26a61b6ed09e5 (patch) | |
| tree | a55a14d258a9f1f88c31a21aeb2628f0d29e86c1 /tools/testing/selftests/bpf/prog_tests/skb_load_bytes.c | |
| parent | c5356ab1db28cafc448a50c26ba84442237abb98 (diff) | |
uprobes: deny mremap(xol_vma)
kernel/events/uprobes.c assumes that xol_area->vaddr is always correct but
a malicious application can remap its "[uprobes]" vma to another adress to
confuse the kernel. Introduce xol_mremap() to make this impossible.
With this change utask->xol_vaddr in xol_free_insn_slot() can't be invalid,
we can turn the offset check into WARN_ON_ONCE(offset >= PAGE_SIZE).
Signed-off-by: Oleg Nesterov <oleg@redhat.com>
Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
Link: https://lore.kernel.org/r/20240929144258.GA9492@redhat.com
Diffstat (limited to 'tools/testing/selftests/bpf/prog_tests/skb_load_bytes.c')
0 files changed, 0 insertions, 0 deletions