[LTP] [PATCH v1] timers/timer_create: Add test for CVE-2017-18344

Cyril Hrubis chrubis@suse.cz
Thu Jul 25 15:48:02 CEST 2019


Hi!
> In kernels prior to 4.14.8 (missing commit cef31d9af908)
> the sigevent.sigev_notify field is not properly checked
> when creating a timer using timer_create(2).
> This can be used to read arbitrary kernel memory.

This is fine but I would like to move the timers into the syscalls
directory before we start to add new testcases. Should I do the move or
will you send a patch?

-- 
Cyril Hrubis
chrubis@suse.cz


More information about the ltp mailing list