Bug 159790

Summary: ptrace changes to registers during ia32 syscall tracing stop are lost
Product: Red Hat Enterprise Linux 3 Reporter: Roland McGrath <roland>
Component: kernelAssignee: Roland McGrath <roland>
Status: CLOSED ERRATA QA Contact: Brian Brock <bbrock>
Severity: medium Docs Contact:
Priority: medium    
Version: 3.0CC: jparadis, petrides, tao
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: RHSA-2005-663 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2005-09-28 15:16:54 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 156320, 158925    
Attachments:
Description Flags
RHEL3 kernel patch fixing this bug none

Description Roland McGrath 2005-06-07 23:54:23 UTC 
When an ia32 process is stopped for syscall tracing, ptrace can be used to
modify its registers and that should change the register arguments seen by the
system call.  strace relies on this facility.

In the RHEL3 kernel, changes to registers that aren't used for 64-bit arguments
are lost.
Comment 1 Roland McGrath 2005-06-07 23:54:23 UTC 
Created attachment 115202 [details]
RHEL3 kernel patch fixing this bug
Comment 2 Ernie Petrides 2005-06-09 00:12:53 UTC 
Patch posted for internal review on 7-Jun-2005.
Comment 4 Ernie Petrides 2005-06-15 01:01:32 UTC 
A fix for this problem has just been committed to the RHEL3 U6
patch pool this evening (in kernel version 2.4.21-32.8.EL).
Comment 11 Red Hat Bugzilla 2005-09-28 15:16:54 UTC 
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2005-663.html