Roland McGrath ccbe495caa x86-64: syscall-audit: fix 32/64 syscall hole
On x86-64, a 32-bit process (TIF_IA32) can switch to 64-bit mode with
ljmp, and then use the "syscall" instruction to make a 64-bit system
call.  A 64-bit process make a 32-bit system call with int $0x80.

In both these cases, audit_syscall_entry() will use the wrong system
call number table and the wrong system call argument registers.  This
could be used to circumvent a syscall audit configuration that filters
based on the syscall numbers or argument details.

Signed-off-by: Roland McGrath <roland@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2009-03-02 15:41:30 -08:00
..
2009-02-21 21:58:18 -05:00
2009-01-09 03:39:43 -05:00
2008-10-16 16:53:13 +02:00
2008-12-12 11:08:42 +01:00
2009-02-10 13:13:23 +01:00
2009-01-04 18:19:37 +01:00
2008-12-31 18:07:42 -05:00
2009-01-04 13:23:07 +01:00
2009-01-04 18:19:37 +01:00
2009-01-04 13:23:04 +01:00
2009-01-04 13:23:04 +01:00
2009-01-02 17:46:24 +01:00
2008-07-26 12:00:04 -07:00
2009-01-06 13:34:03 +01:00
2008-12-16 20:36:44 +01:00
2008-10-20 08:52:41 -07:00
2008-07-16 12:15:17 -07:00
2008-07-26 16:31:35 +02:00
2008-07-22 14:35:57 +02:00
2008-10-22 22:55:23 -07:00
2009-01-04 13:23:05 +01:00
2008-07-22 14:35:57 +02:00
2009-02-15 10:46:13 +01:00
2008-10-16 16:53:13 +02:00
2008-07-22 14:35:57 +02:00
2008-10-29 08:02:28 +01:00