mirror of
https://github.com/RGBCube/serenity
synced 2026-01-21 09:11:00 +00:00
This patch fixes some issues with the mmap() and mprotect() syscalls, neither of whom were checking the permission bits of the underlying files when mapping an inode MAP_SHARED. This made it possible to subvert execution of any running program by simply memory-mapping its executable and replacing some of the code. Test: Kernel/mmap-write-into-running-programs-executable-file.cpp |
||
|---|---|---|
| .. | ||
| mmap-write-into-running-programs-executable-file.cpp | ||
| uaf-close-while-blocked-in-read.cpp | ||