From a8dfadec92437fa4939589a99b8376c90783dd22 Mon Sep 17 00:00:00 2001 From: Serge Hallyn Date: Wed, 30 Nov 2011 15:12:06 +1100 Subject: [PATCH] __send_signal: pass q->info, not info, to userns_fixup_signal_uid (v2) Eric Biederman pointed out that passing info is a bug and could lead to a NULL pointer deref to boot. A collection of signal, securebits, filecaps, cap_bounds, and a few other ltp tests passed with this kernel. Changelog: Nov 18: previous patch missed a leading '&' Signed-off-by: Serge Hallyn Cc: "Eric W. Biederman" Signed-off-by: Andrew Morton --- kernel/signal.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/signal.c b/kernel/signal.c index efe341e70952..e01633219a8b 100644 --- a/kernel/signal.c +++ b/kernel/signal.c @@ -1118,7 +1118,7 @@ static int __send_signal(int sig, struct siginfo *info, struct task_struct *t, break; } - userns_fixup_signal_uid(info, t); + userns_fixup_signal_uid(&q->info, t); } else if (!is_si_special(info)) { if (sig >= SIGRTMIN && info->si_code != SI_USER) { -- 2.39.5