Subject: Re: VServer for 2.6.32
From: Ben Hutchings <ben@decadent.org.uk>
Date: Tue, 12 Jul 2011 03:10:36 +0100
Tue, 12 Jul 2011 03:10:36 +0100
On Tue, 2011-07-12 at 03:02 +0100, Ben Hutchings wrote:
> Secondly, following commit 3c77f845722158206a7209c45ccddc264d19319c
> which was backported into 2.6.32.37, you need to make the new
> acct arg size() function call vx vmpages add().  Patch for this is
> attached.

Just kidding.

Ben

-- 
Ben Hutchings
It is easier to write an incorrect program than to understand a correct one.


From: Ben Hutchings <ben@decadent.org.uk>
Subject: [PATCH] vserver: Complete fix for CVE-2010-4243

VServer requires all adjustments to mm_struct::total_vm to be
accounted to the server as well.

Reported-by: Pascal Vitoux <vitoux.pascal@gmail.com>
References: http://bugs.debian.org/618485

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
--- a/fs/exec.c
+++ b/fs/exec.c
@@ -169,7 +169,7 @@
 		return;
 
 	down_write(&mm->mmap_sem);
-	mm->total_vm += diff;
+	vx_vmpages_add(mm, diff);
 	up_write(&mm->mmap_sem);
 }
 

["application/pgp-signature" not shown]