As written now, it copies random kernel memory from beyond the bounds of the array.
While there, use designated initialisers for seminfo, and add assert in sem_remove() that sema is sane. [These will be separate commits].
Reported and tested by: pho
Differential D23694
sysv_sem: fix the loop that compacts sem array on semaphores removal. Authored by kib on Feb 15 2020, 11:11 AM.
Details As written now, it copies random kernel memory from beyond the bounds of the array. While there, use designated initialisers for seminfo, and add assert in sem_remove() that sema is sane. [These will be separate commits]. Reported and tested by: pho
Diff Detail
|