patch-1.3.6 linux/kernel/sys.c

• Lines: 34
• Date: Fri Jun 30 10:11:52 1995
• Orig file: v1.3.5/linux/kernel/sys.c
• Orig date: Tue Jun 27 14:11:47 1995

diff -u --recursive --new-file v1.3.5/linux/kernel/sys.c linux/kernel/sys.c
@@ -553,6 +553,9 @@
 		return -EPERM;
 	if (gidsetsize > NGROUPS)
 		return -EINVAL;
+	i = verify_area(VERIFY_READ, grouplist, sizeof(gid_t) * gidsetsize);
+	if (i)
+		return i;
 	for (i = 0; i < gidsetsize; i++, grouplist++) {
 		current->groups[i] = get_user(grouplist);
 	}
@@ -669,17 +672,17 @@
  */
 asmlinkage int sys_setdomainname(char *name, int len)
 {
-	int	i;
+	int error;
 	
 	if (!suser())
 		return -EPERM;
 	if (len > __NEW_UTS_LEN)
 		return -EINVAL;
-	for (i=0; i < len; i++) {
-		if ((system_utsname.domainname[i] = get_user(name+i)) == 0)
-			return 0;
-	}
-	system_utsname.domainname[i] = 0;
+	error = verify_area(VERIFY_READ, name, len);
+	if (error)
+		return error;
+	memcpy_fromfs(system_utsname.domainname, name, len);
+	system_utsname.domainname[len] = 0;
 	return 0;
 }