The value resulting from the SECCOMP_RET_DATA mask could exceed MAX_ERRNO
when setting errno during a SECCOMP_RET_ERRNO filter action. This makes
sure we have a reliable value being set, so that an invalid errno will not
be ignored by userspace.
Signed-off-by: Kees Cook <email address hidden>
Reported-by: Dmitry V. Levin <email address hidden>
Cc: Andy Lutomirski <email address hidden>
Cc: Will Drewry <email address hidden>
Signed-off-by: Andrew Morton <email address hidden>
Signed-off-by: Linus Torvalds <email address hidden>
The seccomp regression tests are failing due to SRU kernels not having the relevant commit:
Author: Kees Cook <email address hidden>
Date: Tue Feb 17 13:48:00 2015 -0800
seccomp: cap SECCOMP_RET_ERRNO data to MAX_ERRNO
The value resulting from the SECCOMP_RET_DATA mask could exceed MAX_ERRNO
when setting errno during a SECCOMP_RET_ERRNO filter action. This makes
sure we have a reliable value being set, so that an invalid errno will not
be ignored by userspace.
Signed-off-by: Kees Cook <email address hidden>
Reported-by: Dmitry V. Levin <email address hidden>
Cc: Andy Lutomirski <email address hidden>
Cc: Will Drewry <email address hidden>
Signed-off-by: Andrew Morton <email address hidden>
Signed-off-by: Linus Torvalds <email address hidden>