Re: [CHECKER] 4 security holes in 2.4.4-ac8

[David S. Miller]

Dawson Engler writes:
 > Ah.  I assumed that "sys_*" meant that all pointers were from user space ---
 > is this generally not the case?

This shared memory syscall is just a weird exception.

 > (Also, are there other functions called 
 > directly from user space that don't have the sys_* prefix?)

Almost certainly, arch/i386/mm/fault.c:do_page_fault is one of
many examples.

Later,
David S. Miller
[e-mail]