Peter Hurley 88b9e456b1 ipc: don't allocate a copy larger than max ... When MSG_COPY is set, a duplicate message must be allocated for the copy before locking the queue. However, the copy could not be larger than was sent which is limited to msg_ctlmax. Signed-off-by: Peter Hurley <peter@hurleysoftware.com> Acked-by: Stanislav Kinsbursky <skinsbursky@parallels.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2013-03-08 15:05:33 -08:00
..
compat_mq.c	ipc: initialize structure memory to zero for compat functions	2010-10-27 18:03:13 -07:00
compat.c	selftests: IPC message queue copy feature test	2013-01-04 16:11:45 -08:00
ipc_sysctl.c	ipc: add sysctl to specify desired next object id	2013-01-04 16:11:45 -08:00
ipcns_notifier.c
Makefile	Add generic sys_ipc wrapper	2010-03-12 15:52:32 -08:00
mq_sysctl.c	mqueue: separate mqueue default value from maximum value	2012-05-31 17:49:31 -07:00
mqueue.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-02-26 20:16:07 -08:00
msg.c	ipc: don't allocate a copy larger than max	2013-03-08 15:05:33 -08:00
msgutil.c	ipc: fix potential oops when src msg > 4k w/ MSG_COPY	2013-03-08 15:05:33 -08:00
namespace.c	userns: Require CAP_SYS_ADMIN for most uses of setns.	2012-12-14 16:12:03 -08:00
sem.c	userns: Convert ipc to use kuid and kgid where appropriate	2012-09-06 22:17:20 -07:00
shm.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-02-26 20:16:07 -08:00
syscall.c	ipc: add COMPAT_SHMLBA support	2012-07-30 17:25:20 -07:00
util.c	ipc: convert to idr_alloc()	2013-02-27 19:10:19 -08:00
util.h	ipc: introduce message queue copy feature	2013-01-04 16:11:45 -08:00