From: Al Viro <viro@ftp.linux.org.uk>
Date: Mon, 20 Sep 2010 14:13:09 +0000 (+0100)
Subject: frv: fix address verification holes in setup_frame/setup_rt_frame
X-Git-Tag: v2.6.36-rc5~7
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5f4ad04a1e805d14de080ff9d5384b4d20518a9a;p=pandora-kernel.git

frv: fix address verification holes in setup_frame/setup_rt_frame

a) sa_handler might be maliciously set to point to kernel memory;
   blindly dereferencing it in FDPIC case is a Bad Idea(tm).

b) I'm not sure you need that set_fs(USER_DS) there at all, but if you
   do, you'd better do it *before* checking the frame you've decided to
   use with access_ok(), lest sigaltstack() becomes a convenient
   roothole.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
---

Reading git-diff-tree failed