springcute
/
rt-thread
mirror of https://github.com/RT-Thread/rt-thread.git
0
0
Fork 4
Code Issues Releases Wiki Activity
rt-thread/components/lwp
History
yi chen 4fbdf331d1 lwp: copy timeout into kernel space in sys_select() 
sys_select() passed the raw user-space timeout pointer straight
through to select(), unlike readfds/writefds/exceptfds which are
all validated with lwp_user_accessable() and copied into kernel
memory first. A malicious or buggy user thread could pass a
timeout pointing at unmapped or otherwise invalid memory, which
select() would then dereference directly (timeout->tv_sec /
timeout->tv_usec) without any check, from kernel context.

Validate and copy it into a kernel-local struct timeval the same
way the fd_set arguments already are, before it reaches select().

Fixes #10298

Signed-off-by: yi chen <94xhn1@gmail.com>
 		2026-07-22 21:50:12 +08:00
..
arch 修改用户态 data 页权限为 RO 2026-04-30 06:19:58 +08:00
terminal fix: V-004 security vulnerability 2026-06-16 15:43:44 +08:00
utest fix: move tty_ptmx regression test to utest framework 2026-06-16 15:43:44 +08:00
vdso 完善版权信息 2026-04-30 06:19:58 +08:00
Kconfig [smart] Add vDSO support for RISC-V architecture and refactor related components 2025-05-19 18:29:26 +08:00
SConscript utest: move lwp testcases to components/lwp 2026-06-12 14:22:53 +08:00
libc_musl.h feat: add system reboot and process teardown support 2025-01-06 19:34:16 +08:00
lwp.c lwp: fix pid leak on exec failure before task startup 2026-05-26 16:56:36 +08:00
lwp.h Fix comment for address_search_head field of lwp structure. 2025-10-20 11:12:57 +08:00
lwp_arch_comm.h sync smart & dfs (#8672) 2024-03-28 23:42:56 +08:00
lwp_args.c chore: fix typo in components and libcpu 2026-02-13 21:54:59 +08:00
lwp_args.h [components/lwp]add doxygen comment for lwp_args. (#10696) 2025-09-14 11:26:31 +08:00
lwp_avl.c [components/lwp]add doxygen comment for lwp avl implementation. 2025-09-25 13:46:21 +08:00
lwp_avl.h [components/lwp]add doxygen comment for lwp avl implementation. 2025-09-25 13:46:21 +08:00
lwp_dbg.c [components/lwp]add doxygen comment for lwp_dbg.c. 2025-09-26 16:52:46 +08:00
lwp_dbg.h [component/lwp] support more feature of signal from IEEE Std 1003.1-2017 (#7828) 2023-07-20 00:02:41 +08:00
lwp_elf.c style: format code with clang-format [skip ci] 2026-04-30 06:19:58 +08:00
lwp_elf.h sync branch rt-smart. (#6641) 2022-12-03 12:07:44 +08:00
lwp_futex.c [components/lwp]add doxygen comment for lwp futex. (#10763) 2025-10-04 10:02:21 +08:00
lwp_futex_internal.h [components/lwp]add doxygen comment for lwp futex. (#10763) 2025-10-04 10:02:21 +08:00
lwp_futex_table.c [components/lwp]add doxygen comment for lwp futex. (#10763) 2025-10-04 10:02:21 +08:00
lwp_internal.c [fixup] aarch64 UMP compiler error (#8677) 2024-03-30 17:58:38 +08:00
lwp_internal.h [smart] fixup of script execution (#9009) 2024-05-31 17:32:19 +08:00
lwp_ipc.c RT_TIMER_CTRL_SET_TIME only accept rt_tick_t, pass rt_tick_t instead int/rt_int32_t 2025-09-24 18:12:36 +08:00
lwp_ipc.h fix rt_channel lock. (#8244) 2023-11-10 21:37:07 +08:00
lwp_ipc_internal.h sync branch rt-smart. (#6641) 2022-12-03 12:07:44 +08:00
lwp_itimer.c 🎯 Sync smart & scheduler codes (#8537) 2024-02-23 17:49:15 +08:00
lwp_jobctrl.c sync smart & dfs (#8672) 2024-03-28 23:42:56 +08:00
lwp_mm.c sync branch rt-smart. (#6641) 2022-12-03 12:07:44 +08:00
lwp_mm.h sync branch rt-smart. (#6641) 2022-12-03 12:07:44 +08:00
lwp_pgrp.c [lwp] Implementation of setpgrp and fix mmap2 problems (#9308) 2024-08-22 17:53:18 -04:00
lwp_pid.c lwp: fix pid leak on exec failure before task startup 2026-05-26 16:56:36 +08:00
lwp_pid.h lwp: fix pid leak on exec failure before task startup 2026-05-26 16:56:36 +08:00
lwp_runtime.c feat: add system reboot and process teardown support 2025-01-06 19:34:16 +08:00
lwp_session.c sync smart & dfs (#8672) 2024-03-28 23:42:56 +08:00
lwp_shm.c doxygen: add comments for lwp shared memory APIs 2025-11-15 14:20:36 +08:00
lwp_shm.h sync branch rt-smart. (#6641) 2022-12-03 12:07:44 +08:00
lwp_signal.c [lwp]检查killpg的signo参数的有效性 (#9981) 2025-02-18 14:33:56 +08:00
lwp_signal.h feat: add signal kill all functionality 2025-01-06 19:34:16 +08:00
lwp_sys_socket.h [component][net]add more socket flag 2024-09-13 17:30:24 -04:00
lwp_syscall.c lwp: copy timeout into kernel space in sys_select() 2026-07-22 21:50:12 +08:00
lwp_syscall.h [libc] modify function names to resolve naming conflicts 2024-11-01 18:44:16 -04:00
lwp_tid.c [components/lwp]add doxygen comment for lwp_tid. 2025-09-24 18:14:03 +08:00
lwp_user_mm.c fix(lwp): reject wrapped user copy ranges 2026-04-01 10:11:37 +08:00
lwp_user_mm.h [smart] add mprotect config (#9082) 2024-06-22 13:30:55 +08:00
page.h [rt-smart] kernel virtual memory management layer (#6809) 2023-01-08 21:08:55 -05:00
syscall_generic.h fixup: ptyfs: CI reported snprintf type issues 2024-09-01 15:12:34 -04:00