git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 63395b6) | patch
sysctl binary: Reorder the tests to process wild card entries first.
authorEric W. Biederman <ebiederm@xmission.com>
Thu, 12 Nov 2009 09:39:06 +0000 (01:39 -0800)
committerEric W. Biederman <ebiederm@xmission.com>
Thu, 12 Nov 2009 09:42:31 +0000 (01:42 -0800)
commit757010f026ab3044c594003e216d00a33ed95c56
tree4e9d44c52c34c09b5a347688af20840be7a1c61atree | snapshot
parent63395b65972c07edce595c9cc8a983016738cdaccommit | diff
sysctl binary: Reorder the tests to process wild card entries first.

A malicious user could have passed in a ctl_name of 0 and triggered
the well know ctl_name to procname mapping code, instead of the wild
card matching code.  This is a slight problem as wild card entries don't
have procnames, and because in some alternate universe a network device
might have ifindex 0.  So test for and handle wild card entries first.

Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
kernel/sysctl_binary.c diff | blob | history
Full containers within linux kernel