Unverified Commit 5c54320f authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!12077 ELF: fix kernel.randomize_va_space double read 

Merge Pull Request from: @ci-robot 
 
PR sync from: Gu Bowen <gubowen5@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/PNXSU7LKT7OHUZEKBBLJMCDMKULDGF5X/ 
 
https://gitee.com/src-openeuler/kernel/issues/IAU9NT 
 
Link:https://gitee.com/openeuler/kernel/pulls/12077

 

Reviewed-by: default avatarZhang Peng <zhangpeng362@huawei.com>
Signed-off-by: default avatarZhang Peng <zhangpeng362@huawei.com>
parents 6fd817eb 5c8f91d8

fs/binfmt_elf.c

+3 −2
Original line number Diff line number Diff line
@@ -1008,7 +1008,8 @@ static int load_elf_binary(struct linux_binprm *bprm) 
	if (elf_read_implies_exec(*elf_ex, executable_stack))

		current->personality |= READ_IMPLIES_EXEC;



	if (!(current->personality & ADDR_NO_RANDOMIZE) && randomize_va_space)

	const int snapshot_randomize_va_space = READ_ONCE(randomize_va_space);

	if (!(current->personality & ADDR_NO_RANDOMIZE) && snapshot_randomize_va_space)

		current->flags |= PF_RANDOMIZE;



	setup_new_exec(bprm);
@@ -1300,7 +1301,7 @@ static int load_elf_binary(struct linux_binprm *bprm) 
	mm->end_data = end_data;

	mm->start_stack = bprm->p;



	if ((current->flags & PF_RANDOMIZE) && (randomize_va_space > 1)) {

	if ((current->flags & PF_RANDOMIZE) && (snapshot_randomize_va_space > 1)) {

		/*

		 * For architectures with ELF randomization, when executing

		 * a loader directly (i.e. no interpreter listed in ELF