As written now, it copies random kernel memory from beyond the bounds of the array.
While there, use designated initialisers for seminfo, and add assert in sem_remove() that sema is sane. [These will be separate commits].
Reported and tested by: pho
Differential D23694
sysv_sem: fix the loop that compacts sem array on semaphores removal. Authored by kib on Feb 15 2020, 11:11 AM. Tags None Referenced Files
Details As written now, it copies random kernel memory from beyond the bounds of the array. While there, use designated initialisers for seminfo, and add assert in sem_remove() that sema is sane. [These will be separate commits]. Reported and tested by: pho
Diff Detail
|