Fix: lttng-logger get_user_pages_fast error handling
authorMathieu Desnoyers <mathieu.desnoyers@efficios.com>
Tue, 31 Oct 2017 22:23:59 +0000 (18:23 -0400)
committerMathieu Desnoyers <mathieu.desnoyers@efficios.com>
Tue, 31 Oct 2017 22:32:54 +0000 (18:32 -0400)
commit467f3a485d0da1e9410c5e3e75790dc5f9f456cc
treec2b9d3c63274124db4ebad727d2bf3eac5939fa9
parent7feabe53ccf316430ceb10986e718a638bd584c1
Fix: lttng-logger get_user_pages_fast error handling

Comparing a signed return value against an unsigned nr_pages performs
the comparison as "unsigned", and therefore mistakenly considers
get_user_pages_fast() errors as success.

By passing an invalid pointer to write() to the /proc/lttng-logger
interface, unprivileged user-space processes can trigger a kernel OOPS.

Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
probes/lttng.c
This page took 0.025854 seconds and 4 git commands to generate.