From: Colin Cross Date: Tue, 5 Aug 2014 19:05:17 +0000 (-0700) Subject: mm: fix prctl_set_vma_anon_name X-Git-Tag: firefly_0821_release~4090^2~275 X-Git-Url: http://demsky.eecs.uci.edu/git/?a=commitdiff_plain;h=9bc0c15675840178cee1486c2a7f25faead1518e;p=firefly-linux-kernel-4.4.55.git mm: fix prctl_set_vma_anon_name prctl_set_vma_anon_name could attempt to set the name across two vmas at the same time due to a typo, which might corrupt the vma list. Fix it to use tmp instead of end to limit the name setting to a single vma at a time. Change-Id: Ie32d8ddb0fd547efbeedd6528acdab5ca5b308b4 Reported-by: Jed Davis Signed-off-by: Colin Cross --- diff --git a/kernel/sys.c b/kernel/sys.c index ab7fda5fbe18..65d3e55bd282 100644 --- a/kernel/sys.c +++ b/kernel/sys.c @@ -2187,7 +2187,7 @@ static int prctl_set_vma_anon_name(unsigned long start, unsigned long end, tmp = end; /* Here vma->vm_start <= start < tmp <= (end|vma->vm_end). */ - error = prctl_update_vma_anon_name(vma, &prev, start, end, + error = prctl_update_vma_anon_name(vma, &prev, start, tmp, (const char __user *)arg); if (error) return error;