Re: [WTF?] sys_tas() on m32r

From: Al Viro
Date: Fri Dec 23 2005 - 02:53:54 EST


On Fri, Dec 23, 2005 at 03:50:32PM +0800, liyu wrote:
> >in arch/m32r/kernel/sys_m32r.c. Trivial oops *AND* ability to trigger
> >IO with interrupts disabled.

> The memory that parameter addr pointer is in user-space.
> To access these memory, you should use function like copy_from_user().

... which is deadly with interrupts disabled/under a spinlock. Exactly.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/