diff options
| author | Roland McGrath <roland@redhat.com> | 2009-02-27 19:03:24 -0800 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@suse.de> | 2009-03-16 17:32:21 -0700 |
| commit | 8776fc989b070d4a323793502365acae6851d936 (patch) | |
| tree | 9e1c8db0ac58b574d8d0ebce690b04b216518fc3 /drivers | |
| parent | 1ab4bad21786384ff68dc6576d021acd4e42d8ce (diff) | |
x86-64: syscall-audit: fix 32/64 syscall hole
commit ccbe495caa5e604b04d5a31d7459a6f6a76a756c upstream.
On x86-64, a 32-bit process (TIF_IA32) can switch to 64-bit mode with
ljmp, and then use the "syscall" instruction to make a 64-bit system
call. A 64-bit process make a 32-bit system call with int $0x80.
In both these cases, audit_syscall_entry() will use the wrong system
call number table and the wrong system call argument registers. This
could be used to circumvent a syscall audit configuration that filters
based on the syscall numbers or argument details.
Signed-off-by: Roland McGrath <roland@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Diffstat (limited to 'drivers')
0 files changed, 0 insertions, 0 deletions