Unverified Commit 3f828304 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!15504 um: Fix out-of-bounds read in LDT setup 

Merge Pull Request from: @ci-robot 
 
PR sync from: Xiangwei Li <liwei728@huawei.com>
https://mailweb.openeuler.org/archives/list/kernel@openeuler.org/message/LQM5ZKYI7FZLZBR5SDRXW6DII3WT47RA/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBP73Y 
 
Link:https://gitee.com/openeuler/kernel/pulls/15504

 

Reviewed-by: default avatarXiongfeng Wang <wangxiongfeng2@huawei.com>
Reviewed-by: default avatarYuan Can <yuancan@huawei.com>
Signed-off-by: default avatarYuan Can <yuancan@huawei.com>
parents a1812344 fcf8c2bf

arch/x86/um/ldt.c

+4 −2
Original line number Diff line number Diff line
@@ -23,9 +23,11 @@ static long write_ldt_entry(struct mm_id *mm_idp, int func, 
{

	long res;

	void *stub_addr;



	BUILD_BUG_ON(sizeof(*desc) % sizeof(long));



	res = syscall_stub_data(mm_idp, (unsigned long *)desc,

				(sizeof(*desc) + sizeof(long) - 1) &

				    ~(sizeof(long) - 1),

				sizeof(*desc) / sizeof(long),

				addr, &stub_addr);

	if (!res) {

		unsigned long args[] = { func,