Peter Hurley
88b9e456b1
ipc: don't allocate a copy larger than max
...
When MSG_COPY is set, a duplicate message must be allocated for the copy
before locking the queue. However, the copy could not be larger than was
sent which is limited to msg_ctlmax.
Signed-off-by: Peter Hurley <peter@hurleysoftware.com>
Acked-by: Stanislav Kinsbursky <skinsbursky@parallels.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2013-03-08 15:05:33 -08:00
..
compat.c
selftests: IPC message queue copy feature test
2013-01-04 16:11:45 -08:00
compat_mq.c
ipc: initialize structure memory to zero for compat functions
2010-10-27 18:03:13 -07:00
ipc_sysctl.c
ipc: add sysctl to specify desired next object id
2013-01-04 16:11:45 -08:00
ipcns_notifier.c
Makefile
Add generic sys_ipc wrapper
2010-03-12 15:52:32 -08:00
mq_sysctl.c
mqueue: separate mqueue default value from maximum value
2012-05-31 17:49:31 -07:00
mqueue.c
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2013-02-26 20:16:07 -08:00
msg.c
ipc: don't allocate a copy larger than max
2013-03-08 15:05:33 -08:00
msgutil.c
ipc: fix potential oops when src msg > 4k w/ MSG_COPY
2013-03-08 15:05:33 -08:00
namespace.c
userns: Require CAP_SYS_ADMIN for most uses of setns.
2012-12-14 16:12:03 -08:00
sem.c
userns: Convert ipc to use kuid and kgid where appropriate
2012-09-06 22:17:20 -07:00
shm.c
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2013-02-26 20:16:07 -08:00
syscall.c
ipc: add COMPAT_SHMLBA support
2012-07-30 17:25:20 -07:00
util.c
ipc: convert to idr_alloc()
2013-02-27 19:10:19 -08:00
util.h
ipc: introduce message queue copy feature
2013-01-04 16:11:45 -08:00