Peter Hurley e1082f45f1 ipc: fix potential oops when src msg > 4k w/ MSG_COPY ...

If the src msg is > 4k, then dest->next points to the
next allocated segment; resetting it just prior to dereferencing
is bad.

Signed-off-by: Peter Hurley <peter@hurleysoftware.com>
Acked-by: Stanislav Kinsbursky <skinsbursky@parallels.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2013-03-08 15:05:33 -08:00

..

compat_mq.c

…

compat.c

selftests: IPC message queue copy feature test

2013-01-04 16:11:45 -08:00

ipc_sysctl.c

ipc: add sysctl to specify desired next object id

2013-01-04 16:11:45 -08:00

ipcns_notifier.c

…

Makefile

…

mq_sysctl.c

mqueue: separate mqueue default value from maximum value

2012-05-31 17:49:31 -07:00

mqueue.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-02-26 20:16:07 -08:00

msg.c

ipc: add more comments to message copying related code

2013-01-04 16:11:46 -08:00

msgutil.c

ipc: fix potential oops when src msg > 4k w/ MSG_COPY

2013-03-08 15:05:33 -08:00

namespace.c

userns: Require CAP_SYS_ADMIN for most uses of setns.

2012-12-14 16:12:03 -08:00

sem.c

userns: Convert ipc to use kuid and kgid where appropriate

2012-09-06 22:17:20 -07:00

shm.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-02-26 20:16:07 -08:00

syscall.c

ipc: add COMPAT_SHMLBA support

2012-07-30 17:25:20 -07:00

util.c

ipc: convert to idr_alloc()

2013-02-27 19:10:19 -08:00

util.h

ipc: introduce message queue copy feature

2013-01-04 16:11:45 -08:00