From: Chris Wright Date: Fri, 16 Sep 2005 16:21:25 +0000 (-0700) Subject: Add found by Vasiliy Averin to lost-sockfd patch X-Git-Tag: v2.6.13.2~1 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=9fae4fdddc5022540c7f059732b4d1defc6e2b38;p=thirdparty%2Fkernel%2Fstable-queue.git Add found by Vasiliy Averin to lost-sockfd patch --- diff --git a/review/lost-sockfd_put-in-32bit-compat-routing_ioctl.patch b/review/lost-sockfd_put-in-32bit-compat-routing_ioctl.patch index d0a4c0230a8..09ec05aeb2b 100644 --- a/review/lost-sockfd_put-in-32bit-compat-routing_ioctl.patch +++ b/review/lost-sockfd_put-in-32bit-compat-routing_ioctl.patch @@ -9,7 +9,7 @@ Subject: [PATCH] Lost sockfd_put() in routing_ioctl() From: "Maxim Giryaev" This patch adds lost sockfd_put() in 32bit compat rounting_ioctl() on -64bit platforms +64bit platforms, bug found by Vasiliy Averin . I believe this is a security issues, since user can fget() file as many times as he wants to. So file refcounter can be overlapped and first