Julien Tinnes da48524eb2 Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal code ... Userland should be able to trust the pid and uid of the sender of a signal if the si_code is SI_TKILL. Unfortunately, the kernel has historically allowed sigqueueinfo() to send any si_code at all (as long as it was negative - to distinguish it from kernel-generated signals like SIGILL etc), so it could spoof a SI_TKILL with incorrect siginfo values. Happily, it looks like glibc has always set si_code to the appropriate SI_QUEUE, so there are probably no actual user code that ever uses anything but the appropriate SI_QUEUE flag. So just tighten the check for si_code (we used to allow any negative value), and add a (one-time) warning in case there are binaries out there that might depend on using other si_code values. Signed-off-by: Julien Tinnes <jln@google.com> Acked-by: Oleg Nesterov <oleg@redhat.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2011-03-21 14:23:43 -07:00
..
debug
gcov	Merge branch 'trivial' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild-2.6	2011-03-20 18:14:55 -07:00
irq	genirq: Fix incorrect unlock in __setup_irq()	2011-03-17 15:52:30 +01:00
power	Merge branch 'trivial' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild-2.6	2011-03-20 18:14:55 -07:00
time	Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip	2011-03-15 18:53:35 -07:00
trace	Merge branch 'perf-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip	2011-03-18 10:38:34 -07:00
.gitignore
acct.c
async.c
audit.c	netlink: kill loginuid/sessionid/sid members from struct netlink_skb_parms	2011-03-03 10:55:40 -08:00
audit.h
audit_tree.c
audit_watch.c	kill path_lookup()	2011-03-14 09:15:23 -04:00
auditfilter.c	netlink: kill loginuid/sessionid/sid members from struct netlink_skb_parms	2011-03-03 10:55:40 -08:00
auditsc.c
backtracetest.c
bounds.c
capability.c	security: add cred argument to security_capable()	2011-02-11 17:41:58 +11:00
cgroup.c	perf: Add cgroup support	2011-02-16 13:30:48 +01:00
cgroup_freezer.c
compat.c	posix-timers: Introduce a syscall for clock tuning.	2011-02-02 15:28:19 +01:00
configs.c
cpu.c
cpuset.c	cpuset: add a missing unlock in cpuset_write_resmask()	2011-03-04 17:53:38 -08:00
cred.c	Merge commit 'v2.6.38-rc5' into core/locking	2011-02-16 13:33:41 +01:00
delayacct.c
dma.c
elfcore.c
exec_domain.c
exit.c
extable.c
fork.c	export pid symbols needed for kvm_vcpu_on_spin	2011-03-17 13:08:28 -03:00
freezer.c
futex.c	Merge branch 'core-locking-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip	2011-03-15 18:28:30 -07:00
futex_compat.c
groups.c
hrtimer.c	Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip	2011-03-15 18:53:35 -07:00
hung_task.c
hw_breakpoint.c
irq_work.c
itimer.c
jump_label.c
kallsyms.c
Kconfig.freezer
Kconfig.hz
Kconfig.locks
Kconfig.preempt
kexec.c
kfifo.c
kmod.c
kprobes.c
ksysfs.c
kthread.c
latencytop.c
lockdep.c	lockdep: Move early boot local IRQ enable/disable status to init/main.c	2011-01-20 13:32:33 +01:00
lockdep_internals.h
lockdep_proc.c
lockdep_states.h
Makefile
module.c	tracepoints: Fix section alignment using pointer array	2011-02-03 09:28:46 -05:00
mutex-debug.c
mutex-debug.h
mutex.c
mutex.h
notifier.c
ns_cgroup.c
nsproxy.c
padata.c
panic.c
params.c	module: show version information for built-in modules in sysfs	2011-01-24 14:32:51 +10:30
perf_event.c	perf: Fix tear-down of inherited group events	2011-03-16 14:04:14 +01:00
pid.c	export pid symbols needed for kvm_vcpu_on_spin	2011-03-17 13:08:28 -03:00
pid_namespace.c
pm_qos_params.c	PM QoS: Make pm_qos settings readable	2011-03-15 00:43:18 +01:00
posix-cpu-timers.c	posix-timers: Cleanup namespace	2011-02-02 15:28:19 +01:00
posix-timers.c	timers: Export CLOCK_BOOTTIME via the posix timers interface	2011-02-21 12:53:09 -08:00
printk.c	Merge branch 'driver-core-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core-2.6	2011-03-16 15:05:40 -07:00
profile.c
ptrace.c	Mark ptrace_{traceme,attach,detach} static	2011-03-04 09:23:30 -08:00
range.c
rcupdate.c	rcu: add comment saying why DEBUG_OBJECTS_RCU_HEAD depends on PREEMPT.	2011-03-04 08:05:41 -08:00
rcutiny.c
rcutiny_plugin.h	rcu: call __rcu_read_unlock() in exit_rcu for tiny RCU	2011-03-04 08:05:08 -08:00
rcutorture.c	rcutorture: Get rid of duplicate sched.h include	2011-03-04 08:05:17 -08:00
rcutree.c
rcutree.h
rcutree_plugin.h
rcutree_trace.c
relay.c
res_counter.c
resource.c
rtmutex-debug.c	rtmutex: Simplify PI algorithm and make highest prio task get lock	2011-01-27 21:13:51 -05:00
rtmutex-debug.h
rtmutex-tester.c	rtmutex: tester: Remove the remaining BKL leftovers	2011-02-22 22:07:22 +01:00
rtmutex.c	rtmutex: Simplify PI algorithm and make highest prio task get lock	2011-01-27 21:13:51 -05:00
rtmutex.h
rtmutex_common.h	rtmutex: Simplify PI algorithm and make highest prio task get lock	2011-01-27 21:13:51 -05:00
rwsem.c
sched.c	Merge branch 'config' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/bkl	2011-03-16 17:21:00 -07:00
sched_autogroup.c	sched, autogroup: Stop claiming ownership of the root task group	2011-02-23 11:34:03 +01:00
sched_autogroup.h	sched, autogroup: Stop going ahead if autogroup is disabled	2011-02-23 11:33:59 +01:00
sched_clock.c
sched_cpupri.c
sched_cpupri.h
sched_debug.c	sched: Use a buddy to implement yield_task_fair()	2011-02-03 14:20:33 +01:00
sched_fair.c	sched: Resched proper CPU on yield_to()	2011-03-04 11:14:31 +01:00
sched_features.h
sched_idletask.c	sched: Fix switch_from_fair()	2011-01-26 12:33:22 +01:00
sched_rt.c	Merge branch 'sched/urgent' into sched/core	2011-03-04 11:12:26 +01:00
sched_stats.h
sched_stoptask.c	sched: Fix switch_from_fair()	2011-01-26 12:33:22 +01:00
seccomp.c
semaphore.c
signal.c	Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal code	2011-03-21 14:23:43 -07:00
smp.c	smp_call_function_interrupt: use typedef and %pf	2011-03-17 16:58:11 -07:00
softirq.c	Merge branch 'irq-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip	2011-03-15 19:23:40 -07:00
spinlock.c
srcu.c
stacktrace.c
stop_machine.c
sys.c	PM / Core: Introduce struct syscore_ops for core subsystems PM	2011-03-15 00:43:46 +01:00
sys_ni.c	vfs: Add open by file handle support	2011-03-15 02:21:44 -04:00
sysctl.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6	2011-03-16 09:15:43 -07:00
sysctl_binary.c	open-style analog of vfs_path_lookup()	2011-03-14 09:15:28 -04:00
sysctl_check.c
taskstats.c
test_kprobes.c
time.c	Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip	2011-03-15 18:53:35 -07:00
timeconst.pl
timer.c	Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip	2011-03-15 18:53:35 -07:00
tracepoint.c	tracepoints: Fix section alignment using pointer array	2011-02-03 09:28:46 -05:00
tsacct.c
uid16.c
up.c
user-return-notifier.c
user.c
user_namespace.c
utsname.c
utsname_sysctl.c
wait.c
watchdog.c	watchdog, nmi: Lower the severity of error messages	2011-02-10 13:21:59 +01:00
workqueue.c	Merge branch 'for-2.6.39' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq	2011-03-16 08:20:19 -07:00
workqueue_sched.h