Re: Potential DOS in load_elf_library?

[Andrew Morton]

Yichen Xie <yxie@xxxxxxxxxxxxxxx> wrote:
>
> Hi guys, I was looking at the load_elf_library function (fs/binfmt_elf.c) 
>  in 2.6.10, and noticed the following:
> 
>   	elf_phdata = (struct elf_phdr *) kmalloc(j, GFP_KERNEL);
>   	...
>   	while (elf_phdata->p_type != PT_LOAD) elf_phdata++;
>   	...
>   	kfree(elf_phdata);
> 
>  Could this be problematic since the pointer being freed might be different 
>  from that returned from kmalloc?

Current kernels seem to be OK.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/