Oleg Nesterov 8eeee4e2f0 send_sigio_to_task: sanitize the usage of fown->signum ...

send_sigio_to_task() reads fown->signum several times, we can race with
F_SETSIG which changes ->signum lockless.  In theory, this can fool
security checks or we can call group_send_sig_info() with the wrong
->si_signo which does not match "int sig".

Change the code to cache ->signum.

Signed-off-by: Oleg Nesterov <oleg@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2009-06-16 15:36:17 -07:00

14 KiB

Raw Blame History

View Raw