Linux-mm Archive on lore.kernel.org
 help / color / mirror / Atom feed
From: Daniel Palmer <daniel@0x0f.com>
To: jkoolstra@xs4all.nl
Cc: ast@kernel.org, bpf@vger.kernel.org, brauner@kernel.org,
	corbet@lwn.net, daniel@iogearbox.net, farid.m.zakaria@gmail.com,
	jack@suse.cz, jannh@google.com, kees@kernel.org,
	linux-fsdevel@vger.kernel.org, linux-mm@kvack.org,
	mail@johnericson.me, stable@vger.kernel.org,
	viro@zeniv.linux.org.uk
Subject: Re: [PATCH] binfmt_elf_fdpic: only honour the first PT_INTERP
Date: Tue,  4 Aug 2026 22:42:25 +0900	[thread overview]
Message-ID: <20260804134225.3631912-1-daniel@0x0f.com> (raw)
In-Reply-To: <al_MqBrjDW1QjRau@daedalus>

Hi,

Sorry if I messed this up. First time replying via git.

>Afaict, currently read_code() may blow past what vm_mmap() allocated
>there, which may result in memory corruption for a non MMU system.

I ran Fable on all of the "nommu files" and it found the issue this
commit fixes and the above issue,
I sent a patch (co-written with fable) and we proved this is an actual
issue on nommu via a reproducer tested on a real system.

https://lore.kernel.org/all/20260710121443.1059549-1-daniel@thingy.jp/

Thanks,

Daniel


  parent reply	other threads:[~2026-08-04 13:42 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-07-21 11:20 [PATCH] binfmt_elf_fdpic: only honour the first PT_INTERP Christian Brauner
2026-07-21 20:37 ` Jori Koolstra
2026-07-22 14:02   ` Christian Brauner
2026-08-04 13:42   ` Daniel Palmer [this message]
2026-08-04 13:56     ` Jori Koolstra
2026-07-23  4:13 ` Kees Cook
2026-07-23 13:29   ` Christian Brauner

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20260804134225.3631912-1-daniel@0x0f.com \
    --to=daniel@0x0f.com \
    --cc=ast@kernel.org \
    --cc=bpf@vger.kernel.org \
    --cc=brauner@kernel.org \
    --cc=corbet@lwn.net \
    --cc=daniel@iogearbox.net \
    --cc=farid.m.zakaria@gmail.com \
    --cc=jack@suse.cz \
    --cc=jannh@google.com \
    --cc=jkoolstra@xs4all.nl \
    --cc=kees@kernel.org \
    --cc=linux-fsdevel@vger.kernel.org \
    --cc=linux-mm@kvack.org \
    --cc=mail@johnericson.me \
    --cc=stable@vger.kernel.org \
    --cc=viro@zeniv.linux.org.uk \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox