| |||||||||||||
Removing NULL checksRemoving NULL checksPosted Jul 20, 2009 12:46 UTC (Mon) by spender (subscriber, #23067)In reply to: Removing NULL checks by makomk Parent article: Linux 2.6.30 exploit posted
Andrew Morton is wrong, a BUG_ON is in no way equivalent to just dereferencing a null. What if I have my page mapped at NULL?
If that author adds one more call to smack_netlabel and forgets to check for sock->sk == NULL before calling it, instead of just causing an OOPS he's now potentially created a vulnerability which can result in arbitrary code execution.
-Brad
(Log in to post comments)
|
|||||||||||||