Subject: Re: [Coverity] Untrusted user data in kernel

From: Tomas Carnecky <[email-masked]>
Date: Fri, 17 Dec 2004 14:18:52 +0100

James Morris wrote:
> That's what I meant, you need the capability to do anything bad :-)
> 

But.. even if you have the 'permission' to do bad things, it shouldn't 
be possible.

It's a bug, and only because you can't exploit it if you haven't the 
right capabilities doesn't make the bug disappear.

IMHO such things (passing values between user/kernel space) should 
always be checked.

tom