Messages in this thread | | | Date | Mon, 12 May 2014 23:16:40 +0200 (CEST) | From | Thomas Gleixner <> | Subject | Re: [patch 3/3] futex: Prevent attaching to kernel threads |
| |
On Mon, 12 May 2014, Peter Zijlstra wrote:
> On Mon, May 12, 2014 at 08:45:35PM -0000, Thomas Gleixner wrote: > > We happily allow userspace to declare a random kernel thread to be the > > owner of a user space PI futex. > > > > Found while analysing the fallout of Dave Jones syscall fuzzer. > > Did you also still want to check the ppid for _PRIVATE futexes?
Yes.
I'm still twisting my brain how to confine the non shared case w/o going through loops and hoops. I'm not really sure, whether we can do something about that without making it extremly painful, but we really should try hard.
If the non shared case turns out to be a hopeless case, then we go for the easy private confinement or make the shared case actually painfull enough that people who care about it figure it out :)
Thanks,
tglx
| |