Bug 509628

Summary:	kernel: fd leak if pipe() is called with an invalid address [rhel-3]
Product:	Red Hat Enterprise Linux 3	Reporter:	Eugene Teo (Security Response) <eteo>
Component:	kernel	Assignee:	Red Hat Kernel Manager <kernel-mgr>
Status:	CLOSED NOTABUG	QA Contact:	Martin Jenner <mjenner>
Severity:	high	Docs Contact:
Priority:	high
Version:	3.9	CC:	amwang, dhoward, jcm, lwang, syeghiay
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:	509625	Environment:
Last Closed:	2009-07-10 18:33:51 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	509625
Bug Blocks:

Description Eugene Teo (Security Response) 2009-07-04 08:05:34 UTC

+++ This bug was initially created as a clone of Bug #509625 +++

Description of problem:
fd leak if pipe() is called with an invalid address.

Though -EFAULT is returned, the file descriptors opened by pipe() call are left open.

Reference:
http://patchwork.kernel.org/patch/33640/

Comment 2 Eugene Teo (Security Response) 2009-07-04 08:20:55 UTC

http://www.chineselinuxuniversity.net/patches/43722.shtml