diff options
author | Peter Osterlund <[email protected]> | 2005-05-14 00:58:30 -0700 |
---|---|---|
committer | Greg KH <[email protected]> | 2005-05-16 21:07:31 -0700 |
commit | 118326e940bdecef6c459d42ccf05256ba86daa7 (patch) | |
tree | 13b1e48f4f3700603ed258c41e9e39978babf5ee /net/lapb/lapb_timer.c | |
parent | 68f66feb300423bb9ee5daecb1951af394425a38 (diff) |
[PATCH] Fix root hole in pktcdvd
ioctl_by_bdev may only be used INSIDE the kernel. If the "arg" argument
refers to memory that is accessed by put_user/get_user in the ioctl
function, the memory needs to be in the kernel address space (that's the
set_fs(KERNEL_DS) doing in the ioctl_by_bdev). This works on i386 because
even with set_fs(KERNEL_DS) the user space memory is still accessible with
put_user/get_user. That is not true for s390. In short the ioctl
implementation of the pktcdvd device driver is horribly broken.
Signed-off-by: Peter Osterlund <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'net/lapb/lapb_timer.c')
0 files changed, 0 insertions, 0 deletions