Attachment 24849 Details for Bug 62088

[patch] sacf.patch

foo.xx (text/plain), 1.55 KB, created by Marcus Meissner on 2004-10-11 20:08:49 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Marcus Meissner

Created: 2004-10-11 20:08:49 UTC

Size: 1.55 KB

patch

obsolete

>[PATCH] s390: sacf local root exploit.
>
>From: Martin Schwidefsky <schwidefsky@de.ibm.com>
>
>s390 core changes:
> - Force user process back to home space mode in space switch event
>   exception handler.
>
>Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
>
>diffstat:
> arch/s390/kernel/traps.c |   17 ++++++++++++++++-
> 1 files changed, 16 insertions(+), 1 deletion(-)
>
>diff -urN linux-2.6/arch/s390/kernel/traps.c linux-2.6-sacf/arch/s390/kernel/traps.c
>--- linux-2.6/arch/s390/kernel/traps.c	2004-10-08 16:53:18.000000000 +0200
>+++ linux-2.6-sacf/arch/s390/kernel/traps.c	2004-10-08 16:53:58.000000000 +0200
>@@ -630,6 +630,21 @@
> 	}
> }
> 
>+asmlinkage void space_switch_exception(struct pt_regs * regs, long int_code)
>+{
>+        siginfo_t info;
>+
>+	/* Set user psw back to home space mode. */
>+	if (regs->psw.mask & PSW_MASK_PSTATE)
>+		regs->psw.mask |= PSW_ASC_HOME;
>+	/* Send SIGILL. */
>+        info.si_signo = SIGILL;
>+        info.si_errno = 0;
>+        info.si_code = ILL_PRVOPC;
>+        info.si_addr = get_check_address(regs);
>+        do_trap(int_code, SIGILL, "space switch event", regs, &info);
>+}
>+
> asmlinkage void kernel_stack_overflow(struct pt_regs * regs)
> {
> 	die("Kernel stack overflow", regs, 0);
>@@ -673,7 +688,7 @@
>         pgm_check_table[0x3B] = &do_dat_exception;
> #endif /* CONFIG_ARCH_S390X */
>         pgm_check_table[0x15] = &operand_exception;
>-        pgm_check_table[0x1C] = &privileged_op;
>+        pgm_check_table[0x1C] = &space_switch_exception;
>         pgm_check_table[0x1D] = &hfp_sqrt_exception;
> 	pgm_check_table[0x40] = &do_monitor_call;
>

Actions: View | Diff

Attachments on bug 62088: 24849