tree 63252b79b48b7dfd29d9a8081a34c858dab1de74
parent 20cd514d0f3d288d968217028ca67b70e707d896
author Al Viro <viro@ftp.linux.org.uk> 1284991989 +0100
committer Linus Torvalds <torvalds@linux-foundation.org> 1285004677 -0700

frv: fix address verification holes in setup_frame/setup_rt_frame

a) sa_handler might be maliciously set to point to kernel memory;
   blindly dereferencing it in FDPIC case is a Bad Idea(tm).

b) I'm not sure you need that set_fs(USER_DS) there at all, but if you
   do, you'd better do it *before* checking the frame you've decided to
   use with access_ok(), lest sigaltstack() becomes a convenient
   roothole.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>