waitid(): Add missing access_ok() checks
authorKees Cook <keescook@chromium.org>
Mon, 9 Oct 2017 18:36:52 +0000 (11:36 -0700)
committerLinus Torvalds <torvalds@linux-foundation.org>
Tue, 10 Oct 2017 00:03:31 +0000 (17:03 -0700)
commit96ca579a1ecc943b75beba58bebb0356f6cc4b51
tree604f625619b03abbd872e5acc69a85e1b30b80bc
parentff33952e4d235efa98ce8a43416c19ddc16fb4fa
waitid(): Add missing access_ok() checks

Adds missing access_ok() checks.

CVE-2017-5123

Reported-by: Chris Salls <chrissalls5@gmail.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: Al Viro <viro@zeniv.linux.org.uk>
Fixes: 4c48abe91be0 ("waitid(): switch copyout of siginfo to unsafe_put_user()")
Cc: stable@kernel.org # 4.13
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
kernel/exit.c