summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAlexander Færøy <ahf@torproject.org>2022-05-09 14:37:26 +0000
committerAlexander Færøy <ahf@torproject.org>2022-05-09 14:37:26 +0000
commit20112c13aca0991f0a43bccae691baa00c6fe45d (patch)
tree58796ae0d5f2e3de619526dd7474d7acdd7d3899
parent853270a8719db85d22e982fe638db0e2b62af658 (diff)
parent5f2b75aafd415894153819e9fcd2497c0bbcde46 (diff)
downloadtor-20112c13aca0991f0a43bccae691baa00c6fe45d.tar.gz
tor-20112c13aca0991f0a43bccae691baa00c6fe45d.zip
Merge branch 'maint-0.4.7'
-rw-r--r--changes/ticket406014
-rw-r--r--src/lib/sandbox/sandbox.c3
2 files changed, 7 insertions, 0 deletions
diff --git a/changes/ticket40601 b/changes/ticket40601
new file mode 100644
index 0000000000..529e3badfe
--- /dev/null
+++ b/changes/ticket40601
@@ -0,0 +1,4 @@
+ o Minor bugfixes (linux seccomp2 sandbox):
+ - Allow the rseq system call in the sandbox. This solves a crash issue with
+ glibc 2.35 on Linux. Patch from pmu-ipf. Fixes bug 40601; bugfix on
+ 0.3.5.11.
diff --git a/src/lib/sandbox/sandbox.c b/src/lib/sandbox/sandbox.c
index b734977c3a..7c024d7e37 100644
--- a/src/lib/sandbox/sandbox.c
+++ b/src/lib/sandbox/sandbox.c
@@ -240,6 +240,9 @@ static int filter_nopar_gen[] = {
#endif
SCMP_SYS(read),
SCMP_SYS(rt_sigreturn),
+#ifdef __NR_rseq
+ SCMP_SYS(rseq),
+#endif
SCMP_SYS(sched_getaffinity),
#ifdef __NR_sched_yield
SCMP_SYS(sched_yield),