All of lore.kernel.org
 help / color / mirror / Atom feed
From: Patrick Donnelly <batrick@batbytes.com>
To: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
	Jiri Slaby <jslaby@suse.cz>,
	linux-kernel@vger.kernel.org (open list)
Cc: Patrick Donnelly <batrick@batbytes.com>
Subject: [PATCH v2 2/2] tty: check tcsetpgrp p is a process group
Date: Sat, 27 Jun 2015 20:51:29 -0400	[thread overview]
Message-ID: <1435452689-25390-2-git-send-email-batrick@batbytes.com> (raw)
In-Reply-To: <1435452689-25390-1-git-send-email-batrick@batbytes.com>

This fixes a bug where a process can set the foreground process group to its
pid even if its pid is not a valid pgrp.

Signed-off-by: Patrick Donnelly <batrick@batbytes.com>
---
 drivers/tty/tty_io.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/drivers/tty/tty_io.c b/drivers/tty/tty_io.c
index fbb55db..01b4769 100644
--- a/drivers/tty/tty_io.c
+++ b/drivers/tty/tty_io.c
@@ -2579,6 +2579,9 @@ static int tiocspgrp(struct tty_struct *tty, struct tty_struct *real_tty, pid_t
 	retval = -ESRCH;
 	if (!pgrp)
 		goto out_unlock;
+	retval = -EINVAL;
+	if (!pid_task(pgrp, PIDTYPE_PGID))
+		goto out_unlock;
 	retval = -EPERM;
 	if (session_of_pgrp(pgrp) != task_session(current))
 		goto out_unlock;
-- 
Patrick Donnelly


  reply	other threads:[~2015-06-28  0:51 UTC|newest]

Thread overview: 23+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-06-27 21:17 [PATCH 1/2] Add missing rcu_read_lock for task_pgrp Patrick Donnelly
2015-06-27 21:17 ` [PATCH 2/2] Check tcsetpgrp p is a process group Patrick Donnelly
2015-06-27 23:26   ` Greg Kroah-Hartman
2015-06-28  0:53     ` Patrick Donnelly
2015-06-27 23:27   ` Greg Kroah-Hartman
2015-06-27 23:25 ` [PATCH 1/2] Add missing rcu_read_lock for task_pgrp Greg Kroah-Hartman
2015-06-28  0:51 ` [PATCH v2 1/2] tty: add " Patrick Donnelly
2015-06-28  0:51   ` Patrick Donnelly [this message]
2015-06-28 16:07     ` [PATCH v2 2/2] tty: check tcsetpgrp p is a process group Peter Hurley
2015-06-29  1:27       ` Patrick Donnelly
2015-06-28 15:23   ` [PATCH v2 1/2] tty: add missing rcu_read_lock for task_pgrp Peter Hurley
2015-06-28 17:20     ` Patrick Donnelly
2015-06-28 19:21       ` Peter Hurley
2015-06-28 19:27   ` Peter Hurley
2015-06-29 23:38     ` Patrick Donnelly
2015-06-29 23:59 ` [PATCH v3] " Patrick Donnelly
2015-07-09  2:07   ` Peter Hurley
2015-07-12  2:05   ` Peter Hurley
2015-07-12 22:42     ` Patrick Donnelly
2015-07-12 22:51 ` [PATCH v4] " Patrick Donnelly
2015-07-13  0:35   ` Peter Hurley
2015-07-20  9:26   ` Jiri Slaby
2015-07-20 19:40     ` Oleg Nesterov

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1435452689-25390-2-git-send-email-batrick@batbytes.com \
    --to=batrick@batbytes.com \
    --cc=gregkh@linuxfoundation.org \
    --cc=jslaby@suse.cz \
    --cc=linux-kernel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.