diff options
| author | Bastian Blank <[email protected]> | 2008-02-10 16:47:57 +0200 |
|---|---|---|
| committer | Linus Torvalds <[email protected]> | 2008-02-10 10:27:21 -0800 |
| commit | 712a30e63c8066ed84385b12edbfb804f49cbc44 (patch) | |
| tree | 0562431cf00ccb740547b13a41d79f6319254ca0 /net/unix/sysctl_net_unix.c | |
| parent | 25f666300625d894ebe04bac2b4b3aadb907c861 (diff) | |
splice: fix user pointer access in get_iovec_page_array()
Commit 8811930dc74a503415b35c4a79d14fb0b408a361 ("splice: missing user
pointer access verification") added the proper access_ok() calls to
copy_from_user_mmap_sem() which ensures we can copy the struct iovecs
from userspace to the kernel.
But we also must check whether we can access the actual memory region
pointed to by the struct iovec to fix the access checks properly.
Signed-off-by: Bastian Blank <[email protected]>
Acked-by: Oliver Pinter <[email protected]>
Cc: Jens Axboe <[email protected]>
Cc: Andrew Morton <[email protected]>
Signed-off-by: Pekka Enberg <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Diffstat (limited to 'net/unix/sysctl_net_unix.c')
0 files changed, 0 insertions, 0 deletions