← Back to team overview

kernel-packages team mailing list archive

[Bug 1034010] Re: Incorrect check when executing copy_from_user in perf_event_period

 

Andreas Sandberg, the upstream fix noted in https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1034010/comments/6 is available in Lucid+ as per http://kernel.ubuntu.com/git?p=ubuntu/ubuntu-lucid.git;a=commit;h=ad0cf3478de8677f720ee06393b3147819568d6a . Hence, this is considered closed. If this doesn't work out for you, please reopen by executing the following via a terminal:
apport-collect 1034010

** Changed in: linux (Ubuntu)
       Status: Triaged => Invalid

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1034010

Title:
  Incorrect check when executing copy_from_user in perf_event_period

Status in “linux” package in Ubuntu:
  Invalid

Bug description:
  perf_event_period (called when requesting the PERF_EVENT_IOC_PERIOD on
  a perf_event fd) incorrectly checks the results of copy_from_user.
  Instead of checking that the call succeeded (return value == 0), it
  checks if the return value is the size of the data structure and
  returns -EFAULT in that case. This has the effect of causing the ioctl
  to fail for valid input data and might cause it to succeed for invalid
  input data, causing unpredictable values to be stored into the
  internal perf struct.

  This bug has been fixed in later upstream kernels, but not in the
  2.6.32 series.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1034010/+subscriptions