Subject: Re: VServer for 2.6.32
From: Ben Hutchings <ben@decadent.org.uk>
Date: Tue, 12 Jul 2011 03:10:36 +0100
Tue, 12 Jul 2011 03:10:36 +0100
On Tue, 2011-07-12 at 03:02 +0100, Ben Hutchings wrote:
> Secondly, following commit 3c77f845722158206a7209c45ccddc264d19319c
> which was backported into 2.6.32.37, you need to make the new
> acct arg size() function call vx vmpages add(). Patch for this is
> attached.
Just kidding.
Ben
--
Ben Hutchings
It is easier to write an incorrect program than to understand a correct one.
From: Ben Hutchings <ben@decadent.org.uk>
Subject: [PATCH] vserver: Complete fix for CVE-2010-4243
VServer requires all adjustments to mm_struct::total_vm to be
accounted to the server as well.
Reported-by: Pascal Vitoux <vitoux.pascal@gmail.com>
References: http://bugs.debian.org/618485
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
--- a/fs/exec.c
+++ b/fs/exec.c
@@ -169,7 +169,7 @@
return;
down_write(&mm->mmap_sem);
- mm->total_vm += diff;
+ vx_vmpages_add(mm, diff);
up_write(&mm->mmap_sem);
}
["application/pgp-signature" not shown]