diff options
Diffstat (limited to 'kernel/fork.c')
-rw-r--r-- | kernel/fork.c | 34 |
1 files changed, 7 insertions, 27 deletions
diff --git a/kernel/fork.c b/kernel/fork.c index f9572f416126..2ef529869c64 100644 --- a/kernel/fork.c +++ b/kernel/fork.c | |||
@@ -2525,39 +2525,19 @@ SYSCALL_DEFINE5(clone, unsigned long, clone_flags, unsigned long, newsp, | |||
2525 | #ifdef __ARCH_WANT_SYS_CLONE3 | 2525 | #ifdef __ARCH_WANT_SYS_CLONE3 |
2526 | noinline static int copy_clone_args_from_user(struct kernel_clone_args *kargs, | 2526 | noinline static int copy_clone_args_from_user(struct kernel_clone_args *kargs, |
2527 | struct clone_args __user *uargs, | 2527 | struct clone_args __user *uargs, |
2528 | size_t size) | 2528 | size_t usize) |
2529 | { | 2529 | { |
2530 | int err; | ||
2530 | struct clone_args args; | 2531 | struct clone_args args; |
2531 | 2532 | ||
2532 | if (unlikely(size > PAGE_SIZE)) | 2533 | if (unlikely(usize > PAGE_SIZE)) |
2533 | return -E2BIG; | 2534 | return -E2BIG; |
2534 | 2535 | if (unlikely(usize < CLONE_ARGS_SIZE_VER0)) | |
2535 | if (unlikely(size < sizeof(struct clone_args))) | ||
2536 | return -EINVAL; | 2536 | return -EINVAL; |
2537 | 2537 | ||
2538 | if (unlikely(!access_ok(uargs, size))) | 2538 | err = copy_struct_from_user(&args, sizeof(args), uargs, usize); |
2539 | return -EFAULT; | 2539 | if (err) |
2540 | 2540 | return err; | |
2541 | if (size > sizeof(struct clone_args)) { | ||
2542 | unsigned char __user *addr; | ||
2543 | unsigned char __user *end; | ||
2544 | unsigned char val; | ||
2545 | |||
2546 | addr = (void __user *)uargs + sizeof(struct clone_args); | ||
2547 | end = (void __user *)uargs + size; | ||
2548 | |||
2549 | for (; addr < end; addr++) { | ||
2550 | if (get_user(val, addr)) | ||
2551 | return -EFAULT; | ||
2552 | if (val) | ||
2553 | return -E2BIG; | ||
2554 | } | ||
2555 | |||
2556 | size = sizeof(struct clone_args); | ||
2557 | } | ||
2558 | |||
2559 | if (copy_from_user(&args, uargs, size)) | ||
2560 | return -EFAULT; | ||
2561 | 2541 | ||
2562 | /* | 2542 | /* |
2563 | * Verify that higher 32bits of exit_signal are unset and that | 2543 | * Verify that higher 32bits of exit_signal are unset and that |