Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S266034AbUAFAIm (ORCPT ); Mon, 5 Jan 2004 19:08:42 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S266050AbUAFAIl (ORCPT ); Mon, 5 Jan 2004 19:08:41 -0500 Received: from turing-police.cc.vt.edu ([128.173.14.107]:35458 "EHLO turing-police.cc.vt.edu") by vger.kernel.org with ESMTP id S266034AbUAEX6i (ORCPT ); Mon, 5 Jan 2004 18:58:38 -0500 Message-Id: <200401052358.i05NwWIe010594@turing-police.cc.vt.edu> X-Mailer: exmh version 2.6.3 04/04/2003 with nmh-1.0.4+dev To: Linus Torvalds Cc: linux-kernel@vger.kernel.org Subject: Re: mremap() bug IMHO not in 2.2 In-Reply-To: Your message of "Mon, 05 Jan 2004 15:36:41 PST." From: Valdis.Kletnieks@vt.edu References: <20040105145421.GC2247@rdlg.net> <20040105181053.6560e1e3.grundig@teleline.es> <20040105182607.GB2093@pasky.ji.cz> <20040105225508.GM2093@pasky.ji.cz> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="==_Exmh_-2090502632P"; micalg=pgp-sha1; protocol="application/pgp-signature" Content-Transfer-Encoding: 7bit Date: Mon, 05 Jan 2004 18:58:32 -0500 Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 980 Lines: 30 --==_Exmh_-2090502632P Content-Type: text/plain; charset=us-ascii On Mon, 05 Jan 2004 15:36:41 PST, Linus Torvalds said: > So yes, it creates some confusion in the VM layer, but it all seems > benign. It's clearly a bug, but where does the security problem come in? Just guessing, but would a zero-length vma be rounded up to a page, and thus give the attacker scribble permission on a page he shouldn't have had? --==_Exmh_-2090502632P Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) Comment: Exmh version 2.5 07/13/2001 iD8DBQE/+foocC3lWbTT17ARAuKWAJ9bAZ20RvLncXpP0KIdcqAOWfYUKgCfWnYa Jlp+VFeBwO9CzbPchjVLxDQ= =Zic0 -----END PGP SIGNATURE----- --==_Exmh_-2090502632P-- - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/