kernel-packages team mailing list archive
-
kernel-packages team
-
Mailing list archive
-
Message #37154
[Bug 1034010] Re: Incorrect check when executing copy_from_user in perf_event_period
Andreas Sandberg, the upstream fix noted in https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1034010/comments/6 is available in Lucid+ as per http://kernel.ubuntu.com/git?p=ubuntu/ubuntu-lucid.git;a=commit;h=ad0cf3478de8677f720ee06393b3147819568d6a . Hence, this is considered closed. If this doesn't work out for you, please reopen by executing the following via a terminal:
apport-collect 1034010
** Changed in: linux (Ubuntu)
Status: Triaged => Invalid
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1034010
Title:
Incorrect check when executing copy_from_user in perf_event_period
Status in “linux” package in Ubuntu:
Invalid
Bug description:
perf_event_period (called when requesting the PERF_EVENT_IOC_PERIOD on
a perf_event fd) incorrectly checks the results of copy_from_user.
Instead of checking that the call succeeded (return value == 0), it
checks if the return value is the size of the data structure and
returns -EFAULT in that case. This has the effect of causing the ioctl
to fail for valid input data and might cause it to succeed for invalid
input data, causing unpredictable values to be stored into the
internal perf struct.
This bug has been fixed in later upstream kernels, but not in the
2.6.32 series.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1034010/+subscriptions