• A
    net: Add explicit bound checks in net/socket.c · 47379052
    Arjan van de Ven 提交于
    The sys_socketcall() function has a very clever system for the copy
    size of its arguments. Unfortunately, gcc cannot deal with this in
    terms of proving that the copy_from_user() is then always in bounds.
    This is the last (well 9th of this series, but last in the kernel) such
    case around.
    
    With this patch, we can turn on code to make having the boundary provably
    right for the whole kernel, and detect introduction of new security
    accidents of this type early on.
    Signed-off-by: NArjan van de Ven <arjan@linux.intel.com>
    Signed-off-by: NDavid S. Miller <davem@davemloft.net>
    47379052
socket.c 58.0 KB