mirror of
https://github.com/asterinas/asterinas.git
synced 2025-06-09 05:16:47 +00:00
Add TODO for a potential vulnerability in futex implementation
This commit is contained in:
parent
868b742b31
commit
bc5a058fc5
@ -74,6 +74,15 @@ pub fn futex_wait_bitset(
|
||||
drop(futex_bucket);
|
||||
|
||||
waiter.pause_timeout(timeout)
|
||||
|
||||
// TODO: Ensure the futex item is dequeued and dropped.
|
||||
//
|
||||
// The enqueued futex item remain undequeued
|
||||
// if the futex wait operation is interrupted by a signal or times out.
|
||||
// In such cases, the `Box<FutexItem>` would persist in memory,
|
||||
// leaving our implementation vulnerable to exploitation by user programs
|
||||
// that could repeatedly issue futex wait operations
|
||||
// to exhaust kernel memory.
|
||||
}
|
||||
|
||||
/// Does futex wake
|
||||
|
Loading…
x
Reference in New Issue
Block a user