53 commits

Author	SHA1	Message	Date
Andreas Kling	76c20642f0	Kernel: Ignore closed fd's when considering select() unblock ... This fixes a null RefPtr deref (which asserts) in the scheduler if a file descriptor being select()'ed is closed by a second thread while blocked in select(). Test: Kernel/null-deref-close-during-select.cpp	2020-01-09 12:36:42 +01:00
Andreas Kling	fe9680f0a4	Kernel: Validate PROT_READ and PROT_WRITE against underlying file ... This patch fixes some issues with the mmap() and mprotect() syscalls, neither of whom were checking the permission bits of the underlying files when mapping an inode MAP_SHARED. This made it possible to subvert execution of any running program by simply memory-mapping its executable and replacing some of the code. Test: Kernel/mmap-write-into-running-programs-executable-file.cpp	2020-01-07 19:32:32 +01:00
Andreas Kling	5387a19268	Kernel: Make Process::file_description() vend a RefPtr<FileDescription> ... This encourages callers to strongly reference file descriptions while working with them. This fixes a use-after-free issue where one thread would close() an open fd while another thread was blocked on it becoming readable. Test: Kernel/uaf-close-while-blocked-in-read.cpp	2020-01-07 15:53:42 +01:00