Skip to content

Commit

Permalink
[PATCH] cleanup in proc_check_chroot()
Browse files Browse the repository at this point in the history
proc_check_chroot() does the check in a very unintuitive way (keeping a
copy of the argument, then modifying the argument), and has uncommented
sideeffects.

Signed-off-by: Herbert Poetzl <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
  • Loading branch information
herbertp authored and Linus Torvalds committed Mar 31, 2006
1 parent 158d9eb commit e4e5d3f
Showing 1 changed file with 8 additions and 5 deletions.
13 changes: 8 additions & 5 deletions fs/proc/base.c
Original file line number Diff line number Diff line change
Expand Up @@ -534,12 +534,15 @@ static int proc_oom_score(struct task_struct *task, char *buffer)

/* If the process being read is separated by chroot from the reading process,
* don't let the reader access the threads.
*
* note: this does dput(root) and mntput(vfsmnt) on exit.
*/
static int proc_check_chroot(struct dentry *root, struct vfsmount *vfsmnt)
{
struct dentry *de, *base;
struct vfsmount *our_vfsmnt, *mnt;
int res = 0;

read_lock(&current->fs->lock);
our_vfsmnt = mntget(current->fs->rootmnt);
base = dget(current->fs->root);
Expand All @@ -549,11 +552,11 @@ static int proc_check_chroot(struct dentry *root, struct vfsmount *vfsmnt)
de = root;
mnt = vfsmnt;

while (vfsmnt != our_vfsmnt) {
if (vfsmnt == vfsmnt->mnt_parent)
while (mnt != our_vfsmnt) {
if (mnt == mnt->mnt_parent)
goto out;
de = vfsmnt->mnt_mountpoint;
vfsmnt = vfsmnt->mnt_parent;
de = mnt->mnt_mountpoint;
mnt = mnt->mnt_parent;
}

if (!is_subdir(de, base))
Expand All @@ -564,7 +567,7 @@ static int proc_check_chroot(struct dentry *root, struct vfsmount *vfsmnt)
dput(base);
mntput(our_vfsmnt);
dput(root);
mntput(mnt);
mntput(vfsmnt);
return res;
out:
spin_unlock(&vfsmount_lock);
Expand Down

0 comments on commit e4e5d3f

Please sign in to comment.