Fix: lttng-logger get_user_pages_fast error handling
authorMathieu Desnoyers <mathieu.desnoyers@efficios.com>
Tue, 31 Oct 2017 22:23:59 +0000 (18:23 -0400)
committerMathieu Desnoyers <mathieu.desnoyers@efficios.com>
Tue, 31 Oct 2017 22:42:06 +0000 (18:42 -0400)
commit16c2a31e89abf6f63840af7d31da68c5f8fab9a5
tree2db5d775a636f30ab4b8d156c6d3c5db67ec1131
parentc541df89ebea5cacba2105fd035d1dc0d0ba2521
Fix: lttng-logger get_user_pages_fast error handling

Comparing a signed return value against an unsigned nr_pages performs
the comparison as "unsigned", and therefore mistakenly considers
get_user_pages_fast() errors as success.

By passing an invalid pointer to write() to the /proc/lttng-logger
interface, unprivileged user-space processes can trigger a kernel OOPS.

Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
probes/lttng.c
This page took 0.025074 seconds and 4 git commands to generate.