Skip to Content.
Sympa Menu

sm-security - [SM-Security] Fw: [PATCH] ioperm fix

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Niki Guldbrand <niki AT lunar-linux.org>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] Fw: [PATCH] ioperm fix
  • Date: Fri, 23 May 2003 01:50:06 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi W0rf.

Here is a patch which should fix the kernel ioperm security bug, i just
went into 2.4.21rc3 tonight...


diff -Nru a/arch/i386/kernel/ioport.c b/arch/i386/kernel/ioport.c
- --- a/arch/i386/kernel/ioport.c Thu May 22 15:03:32 2003
+++ b/arch/i386/kernel/ioport.c Thu May 22 15:03:32 2003
@@ -72,17 +72,18 @@
*/
memset(t->io_bitmap,0xff,(IO_BITMAP_SIZE+1)*4);
t->ioperm = 1;
- - /*
- - * this activates it in the TSS
- - */
- - tss->bitmap = IO_BITMAP_OFFSET;
}

/*
* do it in the per-thread copy and in the TSS ...
*/
set_bitmap(t->io_bitmap, from, num, !turn_on);
- - set_bitmap(tss->io_bitmap, from, num, !turn_on);
+ if (tss->bitmap == IO_BITMAP_OFFSET) { /* already active? */
+ set_bitmap(tss->io_bitmap, from, num, !turn_on);
+ } else {
+ memcpy(tss->io_bitmap, t->io_bitmap, IO_BITMAP_SIZE);
+ tss->bitmap = IO_BITMAP_OFFSET; /* Activate it in the TSS */
+ }

return 0;
}
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE+zWIu3DVHt+ASOj0RAviDAJ9HtjjwdP9z83Z+DLV2UNZ9U9tT6QCfXCNf
e3WJg9Phk9qaUzumfh86doc=
=/bnT
-----END PGP SIGNATURE-----




Archive powered by MHonArc 2.6.24.

Top of Page