Rahat Mahmood d6c99694bc Fix race on msgrcv(MSG_COPY). ...

Previously, we weren't making a copy when a sysv message queue was
receiving a message with the MSG_COPY flag. This flag indicates the
message being received should be left in the queue and a copy of the
message should be returned to userspace. Without the copy, a racing
process can modify the original message while it's being marshalled to
user memory.

Reported-by: syzbot+cb15e644698b20ff4e17@syzkaller.appspotmail.com
PiperOrigin-RevId: 396712856

2021-09-14 16:53:30 -07:00

..

BUILD

Merge pull request #6108 from sudo-sturbia:msgqueue/syscalls

2021-07-22 14:33:18 -07:00

msgqueue.go

Fix race on msgrcv(MSG_COPY).

2021-09-14 16:53:30 -07:00