mirror of
https://github.com/RGBCube/serenity
synced 2025-05-31 22:48:11 +00:00
![]() This patch fixes some issues with the mmap() and mprotect() syscalls, neither of whom were checking the permission bits of the underlying files when mapping an inode MAP_SHARED. This made it possible to subvert execution of any running program by simply memory-mapping its executable and replacing some of the code. Test: Kernel/mmap-write-into-running-programs-executable-file.cpp |
||
---|---|---|
.. | ||
Kernel |