mirror of
https://github.com/LadybirdBrowser/ladybird.git
synced 2024-11-22 23:50:19 +00:00
862b3ccb4e
It's now an error to sys$mmap() a file as writable if it's currently mapped executable by anyone else. It's also an error to sys$execve() a file that's currently mapped writable by anyone else. This fixes a race condition vulnerability where one program could make modifications to an executable while another process was in the kernel, in the middle of exec'ing the same executable. Test: Kernel/elf-execve-mmap-race.cpp |
||
---|---|---|
.. | ||
elf-execve-mmap-race.cpp | ||
elf-symbolication-kernel-read-exploit.cpp | ||
mmap-write-into-running-programs-executable-file.cpp | ||
null-deref-close-during-select.cpp | ||
null-deref-crash-during-pthread_join.cpp | ||
uaf-close-while-blocked-in-read.cpp |