Andreas Kling 79576f9280 Kernel: Clear the region lookup cache on exec() ...

Each process has a 1-level lookup cache for fast repeated lookups of
the same VM region (which tends to be the majority of lookups.)
The cache is used by the following syscalls: munmap, madvise, mprotect
and set_mmap_name.

After a succesful exec(), there could be a stale Region* in the lookup
cache, and the new executable was able to manipulate it using a number
of use-after-free code paths.

2020-02-24 12:37:27 +01:00

150 KiB

Raw Blame History

View Raw