[PATCH] sys_swapon bad arg causing slab corruption
There's an error in sys_swapon() that can cause slab corruption if you pass in a bad specialfile pointer. getname() then returns ERR_PTR(-EFAULT), but sys_swapon() doesn't clear name before calling putname() on it (thus freeing 0xfffffff2, corrupting slab). An ltp test case repeatedly crashed in later tests due to thus, irk.
Showing
Please register or sign in to comment