Messages in this thread | | | Date | Mon, 31 Dec 2012 21:12:46 +0000 | From | "Serge E. Hallyn" <> | Subject | Re: [PATCH] prctl: fix validation of an address |
| |
Quoting Cyrill Gorcunov (gorcunov@openvz.org): > > The kernel makes the decision on what is valid via security_mmap_addr(). > > Assuming there are no security fears of an untrusted application > > tricking some priviledged application to set up these maps the answer is > > just calling security_mmap_addr() instead of doing if(addr < > > mmap_min_addr) return -EINVAL; > > If only I've not missed something obvious, the check for security_mmap_addr() here > instead of poking the mmap_min_addr looks more correct for me. Andrew?
That sounds right to me as well.
-serge
| |