projects
/
platform
/
kernel
/
linux-rpi.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
19d6769
)
seccomp: Fix setting loaded filter count during TSYNC
author
Hsuan-Chi Kuo
<hsuanchikuo@gmail.com>
Thu, 4 Mar 2021 23:37:08 +0000
(17:37 -0600)
committer
Kees Cook
<keescook@chromium.org>
Wed, 11 Aug 2021 18:48:28 +0000
(11:48 -0700)
The desired behavior is to set the caller's filter count to thread's.
This value is reported via /proc, so this fixes the inaccurate count
exposed to userspace; it is not used for reference counting, etc.
Signed-off-by: Hsuan-Chi Kuo <hsuanchikuo@gmail.com>
Link:
https://lore.kernel.org/r/20210304233708.420597-1-hsuanchikuo@gmail.com
Co-developed-by: Wiktor Garbacz <wiktorg@google.com>
Signed-off-by: Wiktor Garbacz <wiktorg@google.com>
Link:
https://lore.kernel.org/lkml/20210810125158.329849-1-wiktorg@google.com
Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: stable@vger.kernel.org
Fixes:
c818c03b661c
("seccomp: Report number of loaded filters in /proc/$pid/status")
kernel/seccomp.c
patch
|
blob
|
history
diff --git
a/kernel/seccomp.c
b/kernel/seccomp.c
index
057e17f
..
6469eca
100644
(file)
--- a/
kernel/seccomp.c
+++ b/
kernel/seccomp.c
@@
-602,7
+602,7
@@
static inline void seccomp_sync_threads(unsigned long flags)
smp_store_release(&thread->seccomp.filter,
caller->seccomp.filter);
atomic_set(&thread->seccomp.filter_count,
- atomic_read(&
thread
->seccomp.filter_count));
+ atomic_read(&
caller
->seccomp.filter_count));
/*
* Don't let an unprivileged task work around