[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[plamo:26798] linux-2.6.15.2出ました。
-
From:名倉昭一
-
Date:Tue, 31 Jan 2006 17:01:00 +0900 (JST)
- Subject: [plamo:26798] linux-2.6.15.2出ました。
- From: 名倉昭一<nagura-s@xxxxxxxxxxxx>
- Date: Tue, 31 Jan 2006 17:00:54 +0900
名倉です。
linux-2.6.15.2出ました。 以下はその抜粋です。
commit 1518d0b7a1ab6465487491c374bd18df6a4c036b
Author: Alexander Viro <aviro@redhat.com>
Date: Sat Jan 14 15:29:55 2006 -0500
[PATCH] Fix double decrement of mqueue_mnt->mnt_count in sys_mq_open (CVE-2005-3356)
Fixed the refcounting on failure exits in sys_mq_open() and
cleaned the logics up. Rules are actually pretty simple - dentry_open()
expects vfsmount and dentry to be pinned down and it either transfers
them into created struct file or drops them. Old code had been very
confused in that area - if dentry_open() had failed either in do_open()
or do_create(), we ended up dentry and mqueue_mnt dropped twice, once
by dentry_open() cleanup and then by sys_mq_open().
Fix consists of making the rules for do_create() and do_open()
same as for dentry_open() and updating the sys_mq_open() accordingly;
that actually leads to more straightforward code and less work on
normal path.
Signed-off-by: Al Viro <aviro@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
[検索ページ]
[メール一覧]
Plamo ML 公開システム