vm audit: add VM_DONTEXPAND to mmap for drivers that need it
Drivers that register a ->fault handler, but do not range-check the offset argument, must set VM_DONTEXPAND in the vm_flags in order to prevent an expanding mremap from overflowing the resource. I've audited the tree and attempted to fix these problems (usually by adding VM_DONTEXPAND where it is not obvious). Signed-off-by:Nick Piggin <npiggin@suse.de> Signed-off-by:
Linus Torvalds <torvalds@linux-foundation.org>
Showing
- drivers/char/drm/drm_vm.c 2 additions, 0 deletionsdrivers/char/drm/drm_vm.c
- drivers/char/mspec.c 1 addition, 1 deletiondrivers/char/mspec.c
- fs/ncpfs/mmap.c 0 additions, 4 deletionsfs/ncpfs/mmap.c
- kernel/relay.c 1 addition, 0 deletionskernel/relay.c
- mm/mmap.c 1 addition, 1 deletionmm/mmap.c
- sound/oss/via82cxxx_audio.c 6 additions, 8 deletionssound/oss/via82cxxx_audio.c
- sound/usb/usx2y/usX2Yhwdep.c 1 addition, 1 deletionsound/usb/usx2y/usX2Yhwdep.c
- sound/usb/usx2y/usx2yhwdeppcm.c 1 addition, 1 deletionsound/usb/usx2y/usx2yhwdeppcm.c
Please register or sign in to comment