Peter Hurley f273e02595 ipc: don't allocate a copy larger than max ...

commit 88b9e456b1 upstream.

When MSG_COPY is set, a duplicate message must be allocated for the copy
before locking the queue.  However, the copy could not be larger than was
sent which is limited to msg_ctlmax.

Signed-off-by: Peter Hurley <peter@hurleysoftware.com>
Acked-by: Stanislav Kinsbursky <skinsbursky@parallels.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2013-03-14 11:26:24 -07:00

..

compat_mq.c

ipc: initialize structure memory to zero for compat functions

2010-10-27 18:03:13 -07:00

compat.c

selftests: IPC message queue copy feature test

2013-01-04 16:11:45 -08:00

ipc_sysctl.c

ipc: add sysctl to specify desired next object id

2013-01-04 16:11:45 -08:00

ipcns_notifier.c

ipc: do not use a negative value to re-enable msgmni automatic recomputing

2008-07-25 10:53:42 -07:00

Makefile

Add generic sys_ipc wrapper

2010-03-12 15:52:32 -08:00

mq_sysctl.c

mqueue: separate mqueue default value from maximum value

2012-05-31 17:49:31 -07:00

mqueue.c

audit: make audit_inode take struct filename

2012-10-12 20:15:09 -04:00

msg.c

ipc: don't allocate a copy larger than max

2013-03-14 11:26:24 -07:00

msgutil.c

ipc: fix potential oops when src msg > 4k w/ MSG_COPY

2013-03-14 11:26:24 -07:00

namespace.c

userns: Require CAP_SYS_ADMIN for most uses of setns.

2012-12-14 16:12:03 -08:00

sem.c

userns: Convert ipc to use kuid and kgid where appropriate

2012-09-06 22:17:20 -07:00

shm.c

mm: support more pagesizes for MAP_HUGETLB/SHM_HUGETLB

2012-12-11 17:22:25 -08:00

syscall.c

ipc: add COMPAT_SHMLBA support

2012-07-30 17:25:20 -07:00

util.c

ipc: add sysctl to specify desired next object id

2013-01-04 16:11:45 -08:00

util.h

ipc: introduce message queue copy feature

2013-01-04 16:11:45 -08:00