Kees Cook 5883f57ca0 proc: protect mm start_code/end_code in /proc/pid/stat ... While mm->start_stack was protected from cross-uid viewing (commit f83ce3e6b0 ("proc: avoid information leaks to non-privileged processes")), the start_code and end_code values were not. This would allow the text location of a PIE binary to leak, defeating ASLR. Note that the value "1" is used instead of "0" for a protected value since "ps", "killall", and likely other readers of /proc/pid/stat, take start_code of "0" to mean a kernel thread and will misbehave. Thanks to Brad Spengler for pointing this out. Addresses CVE-2011-0726 Signed-off-by: Kees Cook <kees.cook@canonical.com> Cc: <stable@kernel.org> Cc: Alexey Dobriyan <adobriyan@gmail.com> Cc: David Howells <dhowells@redhat.com> Cc: Eugene Teo <eugeneteo@kernel.sg> Cc: Martin Schwidefsky <schwidefsky@de.ibm.com> Cc: Brad Spengler <spender@grsecurity.net> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2011-03-23 19:46:37 -07:00
..
9p	9p: use the updated offset given by generic_write_checks	2011-03-22 16:32:49 -05:00
adfs	fs/adfs/adfs.h: fix unsigned comparison	2011-03-23 19:46:09 -07:00
affs	fs: change to new flag variable	2011-03-17 14:02:57 +01:00
afs
autofs4	lose 'mounting_here' argument in ->d_manage()	2011-03-18 10:01:59 -04:00
befs
bfs	bfs: fix bitmap size argument to find_first_zero_bit()	2011-03-21 08:35:12 -04:00
btrfs	zlib: slim down zlib_deflate() workspace when possible	2011-03-22 17:44:17 -07:00
cachefiles
ceph	ceph: rename dentry_release -> d_release, fix comment	2011-03-21 12:24:26 -07:00
cifs
coda	codafs: fix compile warning when CONFIG_SYSCTL=n	2011-03-22 17:44:16 -07:00
configfs
cramfs
debugfs
devpts	fs/devpts/inode.c: correctly check d_alloc_name() return code in devpts_pty_new()	2011-03-22 17:44:17 -07:00
dlm
ecryptfs
efs
exofs
exportfs
ext2	bitops: remove ext2 non-atomic bitops from asm/bitops.h	2011-03-23 19:46:21 -07:00
ext3	Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs-2.6	2011-03-17 17:41:19 -07:00
ext4	ext4: use little-endian bitops	2011-03-23 19:46:17 -07:00
fat
freevxfs
fscache
fuse	mm: add replace_page_cache_page() function	2011-03-22 17:44:02 -07:00
gfs2	Merge branch 'trivial' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild-2.6	2011-03-20 18:14:55 -07:00
hfs
hfsplus
hostfs
hpfs
hppfs
hugetlbfs	mm: hugetlbfs: change remove_from_page_cache	2011-03-22 17:44:02 -07:00
isofs
jbd
jbd2
jffs2	zlib: slim down zlib_deflate() workspace when possible	2011-03-22 17:44:17 -07:00
jfs	Merge branch 'trivial' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild-2.6	2011-03-20 18:14:55 -07:00
lockd
logfs	zlib: slim down zlib_deflate() workspace when possible	2011-03-22 17:44:17 -07:00
minix	bitops: remove minix bitops from asm/bitops.h	2011-03-23 19:46:22 -07:00
ncpfs	fs: change to new flag variable	2011-03-17 14:02:57 +01:00
nfs	nfs: lock() vs unlock() typo	2011-03-21 00:45:50 -04:00
nfs_common
nfsd	don't pass 'mounting_here' flag to follow_down()	2011-03-18 09:04:20 -04:00
nilfs2	nilfs2: use little-endian bitops	2011-03-23 19:46:18 -07:00
nls
notify
ntfs	fs: change to new flag variable	2011-03-17 14:02:57 +01:00
ocfs2	ocfs2: use little-endian bitops	2011-03-23 19:46:17 -07:00
omfs
openpromfs
partitions
proc	proc: protect mm start_code/end_code in /proc/pid/stat	2011-03-23 19:46:37 -07:00
pstore	pstore: use mount option instead sysfs to tweak kmsg_bytes	2011-03-21 13:50:05 -07:00
qnx4
quota
ramfs
reiserfs	Merge branch 'trivial' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild-2.6	2011-03-20 18:14:55 -07:00
romfs
squashfs
sysfs
sysv
ubifs	Merge branch 'linux-next' of git://git.infradead.org/ubifs-2.6	2011-03-18 10:50:27 -07:00
udf	udf: use little-endian bitops	2011-03-23 19:46:19 -07:00
ufs	ufs: use little-endian bitops	2011-03-23 19:46:19 -07:00
xfs	Merge branch 'for-linus' of git://oss.sgi.com/xfs/xfs	2011-03-21 14:24:56 -07:00
aio.c	aio: wake all waiters when destroying ctx	2011-03-22 17:44:17 -07:00
anon_inodes.c
attr.c
bad_inode.c
binfmt_aout.c
binfmt_elf_fdpic.c
binfmt_elf.c	binfmt_elf: quiet GCC-4.6 'set but not used' warning in load_elf_binary()	2011-03-22 17:44:15 -07:00
binfmt_em86.c
binfmt_flat.c
binfmt_misc.c
binfmt_script.c
binfmt_som.c
bio-integrity.c
bio.c	fs: use appropriate printk priority levels	2011-03-22 17:44:10 -07:00
block_dev.c
buffer.c
char_dev.c
compat_binfmt_elf.c
compat_ioctl.c
compat.c	select: remove unused MAX_SELECT_SECONDS	2011-03-21 00:16:08 -04:00
dcache.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6	2011-03-18 10:51:11 -07:00
dcookies.c
direct-io.c
drop_caches.c
eventfd.c
eventpoll.c	epoll: fix compiler warning and optimize the non-blocking path	2011-03-22 17:44:15 -07:00
exec.c	Small typo fix...	2011-03-21 00:16:09 -04:00
fcntl.c
fhandle.c
fifo.c	Filesystem: fifo: Fixed coding style issue.	2011-03-21 00:16:09 -04:00
file_table.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6	2011-03-16 13:26:17 -07:00
file.c
filesystems.c
fs_struct.c
fs-writeback.c
generic_acl.c
inode.c	fs/inode: Fix kernel-doc format for inode_init_owner	2011-03-21 00:16:08 -04:00
internal.h	FS: lookup_mnt() is only used in the core fs routines now	2011-03-21 12:13:10 -04:00
ioctl.c	vfs: cleanup do_vfs_ioctl()	2011-03-21 00:16:08 -04:00
ioprio.c
Kconfig	Merge branch 'release' of git://git.kernel.org/pub/scm/linux/kernel/git/aegl/linux-2.6	2011-03-16 19:01:29 -07:00
Kconfig.binfmt
libfs.c
locks.c
Makefile	Merge branch 'release' of git://git.kernel.org/pub/scm/linux/kernel/git/aegl/linux-2.6	2011-03-16 19:01:29 -07:00
mbcache.c
mpage.c
namei.c	lose 'mounting_here' argument in ->d_manage()	2011-03-18 10:01:59 -04:00
namespace.c	fs: use appropriate printk priority levels	2011-03-22 17:44:10 -07:00
nfsctl.c
no-block.c
open.c	fs: Use BUG_ON(!mnt) at dentry_open().	2011-03-21 01:10:41 -04:00
pipe.c
pnode.c
pnode.h
posix_acl.c
read_write.c
read_write.h
readdir.c
select.c	select: remove unused MAX_SELECT_SECONDS	2011-03-21 00:16:08 -04:00
seq_file.c
signalfd.c
splice.c
stack.c
stat.c
statfs.c
super.c	vfs: split off vfsmount-related parts of vfs_kern_mount()	2011-03-17 22:10:41 -04:00
sync.c	introduce sys_syncfs to sync a single file system	2011-03-21 00:40:29 -04:00
timerfd.c
utimes.c
xattr_acl.c
xattr.c