linux

History

Xiaotian Feng be4d250ab4 ipcns: fix use after free in free_ipc_ns()

commit b515498 ("userns: add a user namespace owner of ipc ns") added a
user namespace owner of ipc ns, but it also introduced a use after free in
free_ipc_ns().

Signed-off-by: Xiaotian Feng <dfeng@redhat.com>
Acked-by: "Serge E. Hallyn" <serge.hallyn@canonical.com>
Acked-by: David Howells <dhowells@redhat.com>
Cc: "Eric W. Biederman" <ebiederm@xmission.com>
Cc: Daniel Lezcano <daniel.lezcano@free.fr>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2011-03-25 17:45:16 -07:00

compat_mq.c

ipc: initialize structure memory to zero for compat functions

2010-10-27 18:03:13 -07:00

compat.c

ipc: initialize structure memory to zero for compat functions

2010-10-27 18:03:13 -07:00

ipc_sysctl.c

sysctl ipc: Remove dead binary sysctl support code.

2009-11-12 02:04:54 -08:00

ipcns_notifier.c

ipc: do not use a negative value to re-enable msgmni automatic recomputing