Fix: lttng-logger get_user_pages_fast error handling
authorMathieu Desnoyers <mathieu.desnoyers@efficios.com>
Tue, 31 Oct 2017 22:23:59 +0000 (18:23 -0400)
committerMathieu Desnoyers <mathieu.desnoyers@efficios.com>
Tue, 31 Oct 2017 22:42:02 +0000 (18:42 -0400)
commit8c82bf9c7c15182d0c2222b62ba3bced4afa0cad
treeeaf78cdf7f151dde41b39c8da03ec931710c1ebc
parent26aaae5f9d305783a3b131aa5d618e2b39cb1185
Fix: lttng-logger get_user_pages_fast error handling

Comparing a signed return value against an unsigned nr_pages performs
the comparison as "unsigned", and therefore mistakenly considers
get_user_pages_fast() errors as success.

By passing an invalid pointer to write() to the /proc/lttng-logger
interface, unprivileged user-space processes can trigger a kernel OOPS.

Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
probes/lttng.c
This page took 0.025023 seconds and 4 git commands to generate.