Skip to content
Snippets Groups Projects
Commit 0374db72 authored by Colin Cross's avatar Colin Cross Committed by Allen Huang
Browse files

mm: fix prctl_set_vma_anon_name


prctl_set_vma_anon_name could attempt to set the name across
two vmas at the same time due to a typo, which might corrupt
the vma list.  Fix it to use tmp instead of end to limit
the name setting to a single vma at a time.

Change-Id: Ie32d8ddb0fd547efbeedd6528acdab5ca5b308b4
Reported-by: default avatarJed Davis <jld@mozilla.com>
Signed-off-by: default avatarColin Cross <ccross@android.com>
Reviewed-on: http://mcrd1-22-pc.corpnet.asus/code-review/master/229016


Reviewed-by: default avatarallen1_huang <allen1_huang@asus.com>
Tested-by: default avatarallen1_huang <allen1_huang@asus.com>
parent 0df29d64
No related branches found
No related tags found
No related merge requests found
......@@ -2284,7 +2284,7 @@ static int prctl_set_vma_anon_name(unsigned long start, unsigned long end,
tmp = end;
/* Here vma->vm_start <= start < tmp <= (end|vma->vm_end). */
error = prctl_update_vma_anon_name(vma, &prev, start, end,
error = prctl_update_vma_anon_name(vma, &prev, start, tmp,
(const char __user *)arg);
if (error)
return error;
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment