[PATCH 1/1] __send_signal: pass q->info, not info, touserns_fixup_signal_uid

From: Serge E. Hallyn
Date: Fri Nov 18 2011 - 12:37:26 EST


Eric Biederman pointed out that passing info is a bug and could lead
to a NULL pointer deref to boot.

Signed-off-by: Serge Hallyn <serge.hallyn@xxxxxxxxxxxxx>
---
kernel/signal.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/kernel/signal.c b/kernel/signal.c
index c0f0782..2751f79 100644
--- a/kernel/signal.c
+++ b/kernel/signal.c
@@ -1118,7 +1118,7 @@ static int __send_signal(int sig, struct siginfo *info, struct task_struct *t,
break;
}

- userns_fixup_signal_uid(info, t);
+ userns_fixup_signal_uid(q->info, t);

} else if (!is_si_special(info)) {
if (sig >= SIGRTMIN && info->si_code != SI_USER) {
--
1.7.5.4

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/