Re: [PATCH] Drop reference added by grab_header

2017-01-05 Thread zhouchengming
On 2017/1/5 19:56, Hanjun Guo wrote: On 2017/1/5 19:33, Zhou Chengming wrote: Fixes CVE-2016-9191. CVE-2016-9191 says that it's cgroup bug but turns out it's not, I think you need to add more commit message to explain it? For example, we got different calltrace stack but all of them point to d

Re: [PATCH] Drop reference added by grab_header

2017-01-05 Thread Hanjun Guo
On 2017/1/5 19:33, Zhou Chengming wrote: > Fixes CVE-2016-9191. CVE-2016-9191 says that it's cgroup bug but turns out it's not, I think you need to add more commit message to explain it? For example, we got different calltrace stack but all of them point to drop_sysctl_table() and it turns out a r

[PATCH] Drop reference added by grab_header

2017-01-05 Thread Zhou Chengming
Fixes CVE-2016-9191. Reported-by: CAI Qian Tested-by: Yang Shukui Signed-off-by: Zhou Chengming --- fs/proc/proc_sysctl.c |3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/fs/proc/proc_sysctl.c b/fs/proc/proc_sysctl.c index 5d931bf..c4c90bd 100644 --- a/fs/proc/proc_sy