Re: Possible bug kernel/seccomp.c

From: Kees Cook
Date: Thu Mar 04 2021 - 15:02:27 EST


On Thu, Mar 04, 2021 at 01:14:16PM -0600, Hsuan-Chi Kuo wrote:
> cc mailing list.
>
> On 3/4/21 1:10 PM, Hsuan-Chi Kuo wrote:
> > Hello,
> >
> > Should this line be atomic_read(&caller->seccomp.filter_count));
> >
> > https://elixir.bootlin.com/linux/latest/source/kernel/seccomp.c#L600
> >
> > I think the desired behavior is to synchronize the filter count.

Yecch. Yeah, that's a bug. Thanks for noticing that! Can you send a
patch to fix it?

--
Kees Cook