From ae5b83eb585691e8e9a6ffd258014e5f246b1122 Mon Sep 17 00:00:00 2001 From: "gregkh@suse.de" Date: Wed, 11 May 2005 12:00:46 -0700 Subject: [PATCH] [PATCH] added binelf patch. --- queue/CAN-2005-1263.patch | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 queue/CAN-2005-1263.patch diff --git a/queue/CAN-2005-1263.patch b/queue/CAN-2005-1263.patch new file mode 100644 index 00000000000..a03b40b4401 --- /dev/null +++ b/queue/CAN-2005-1263.patch @@ -0,0 +1,31 @@ +Subject: fix Linux kernel ELF core dump privilege elevation + +As reported by Paul Starzetz + +Reference: CAN-2005-1263 + +Signed-off-by: Greg Kroah-Hartman +--- + fs/binfmt_elf.c | 4 ++-- + 1 files changed, 2 insertions(+), 2 deletions(-) + +--- gregkh-2.6.orig/fs/binfmt_elf.c 2005-05-11 11:15:48.000000000 -0700 ++++ gregkh-2.6/fs/binfmt_elf.c 2005-05-11 11:15:50.000000000 -0700 +@@ -251,7 +251,7 @@ + } + + /* Populate argv and envp */ +- p = current->mm->arg_start; ++ p = current->mm->arg_end = current->mm->arg_start; + while (argc-- > 0) { + size_t len; + __put_user((elf_addr_t)p, argv++); +@@ -1301,7 +1301,7 @@ + static int fill_psinfo(struct elf_prpsinfo *psinfo, struct task_struct *p, + struct mm_struct *mm) + { +- int i, len; ++ unsigned int i, len; + + /* first copy the parameters from user space */ + memset(psinfo, 0, sizeof(struct elf_prpsinfo)); -- 2.47.3