[kernel] r4949 - patch-tracking

[Moritz Muehlenhoff]

Author: jmm-guest
Date: Thu Dec  1 23:07:54 2005
New Revision: 4949

Added:
   patch-tracking/CVE-2005-1765.patch
Modified:
   patch-tracking/CVE-2005-1765
Log:
patch for CVE-2005-1765


Modified: patch-tracking/CVE-2005-1765
==============================================================================
--- patch-tracking/CVE-2005-1765	(original)
+++ patch-tracking/CVE-2005-1765	Thu Dec  1 23:07:54 2005
@@ -9,6 +9,8 @@
  a denial of service (kernel hang) via crafted arguments.
 
 Notes: 
+ jmm> I've extracted the patch from the Ubuntu update (CVE-2005-1765.patch)
+
 Bugs: 
 upstream: 
 2.6.14: 

Added: patch-tracking/CVE-2005-1765.patch
==============================================================================
--- (empty file)
+++ patch-tracking/CVE-2005-1765.patch	Thu Dec  1 23:07:54 2005
@@ -0,0 +1,12 @@
+diff -urN x/arch/x86_64/mm/fault.c y/arch/x86_64/mm/fault.c
+--- x/arch/x86_64/mm/fault.c   2004-08-24 17:15:18.000000000 +1000
++++ y/arch/x86_64/mm/fault.c   2005-06-14 21:35:57.000000000 +1000
+@@ -352,0 +352,8 @@
+
+ #ifdef CONFIG_IA32_EMULATION
+               /* 32bit vsyscall. map on demand. */
+-              if (test_thread_flag(TIF_IA32) &&
++              if (test_thread_flag(TIF_IA32) && ((error_code & 6) == 4) &&
+           address >= 0xffffe000 && address < 0xffffe000 + PAGE_SIZE) {
+                       if (map_syscall32(mm, address) < 0)
+                               goto out_of_memory2;