splice() and the ghost of set_fs()
splice() and the ghost of set_fs()
Posted May 28, 2022 3:56 UTC (Sat) by willy (subscriber, #9762)In reply to: splice() and the ghost of set_fs() by SLi
Parent article: splice() and the ghost of set_fs()
That's not the problem.
The problem is twofold. One is that while set_fs() is active, various security measures (like SMEP and SMAP) are defeated. The other is that (on some architectures and eg on a 4GB/4GB split x86-32), you may not actually be able to access userspace because accessing userspace actually accesses kernel space. On x86-64, you can tell from the high bits of the pointer whether it's userspace or kernel space, but that's not true eg on SPARC or PARISC.
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.