From mboxrd@z Thu Jan 1 00:00:00 1970 From: hch@infradead.org (Christoph Hellwig) Date: Tue, 9 May 2017 09:03:22 -0700 Subject: [kernel-hardening] Re: [PATCH v9 1/4] syscalls: Verify address limit before returning to user-mode In-Reply-To: <20170509130250.GA11381@infradead.org> References: <20170428153213.137279-1-thgarnie@google.com> <20170508073352.caqe3fqf7nuxypgi@gmail.com> <20170508124621.GA20705@kroah.com> <20170509064522.anusoikaalvlux3w@gmail.com> <20170509085659.GA32555@infradead.org> <20170509130250.GA11381@infradead.org> Message-ID: <20170509160322.GA15902@infradead.org> To: linux-arm-kernel@lists.infradead.org List-Id: linux-arm-kernel.lists.infradead.org On Tue, May 09, 2017 at 06:02:50AM -0700, Christoph Hellwig wrote: > On Tue, May 09, 2017 at 06:00:01AM -0700, Andy Lutomirski wrote: > > fs/splice.c has some, ahem, interesting uses that have been the source > > of nasty exploits in the past. Converting them to use iov_iter > > properly would be really, really nice. Christoph, I don't suppose > > you'd like to do that? > > I can take care of all the fs code including this one. I spent the afternoon hacking up where I'd like this to head. It's completely untested as of now: http://git.infradead.org/users/hch/vfs.git/shortlog/refs/heads/setfs-elimination