提交 4bcff1b3 编写于 作者: D David Woodhouse

AUDIT: Fix user pointer deref thinko in sys_socketcall().

I cunningly put the audit call immediately after the 
copy_from_user().... but used the _userspace_ copy of the args still. 
Let's not do that.
Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>
上级 8f37d47c
......@@ -1908,7 +1908,7 @@ asmlinkage long sys_socketcall(int call, unsigned long __user *args)
if (copy_from_user(a, args, nargs[call]))
return -EFAULT;
err = audit_socketcall(nargs[call]/sizeof(unsigned long), args);
err = audit_socketcall(nargs[call]/sizeof(unsigned long), a);
if (err)
return err;
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册