security: tighten mprotect ownership check (C5 partial)

diff --git a/src/kernel/syscall.c b/src/kernel/syscall.c
index f6c51f6bab8bcdae63b1edb73d6ee6b422476901..334dc10a90fc0d40ccafb73f0eaf1d5a5487046b 100644 (file)
--- a/src/kernel/syscall.c
+++ b/src/kernel/syscall.c
@@ -4309,7 +4309,7 @@ void syscall_handler(struct registers* regs) {
         if (!owned) {
             uintptr_t kern_base = hal_mm_kernel_virt_base();
             if (kern_base && addr < kern_base && addr >= 0x08000000U)
-                owned = 1;  /* permissive: allow for text/data/bss/stack regions */
+                owned = 1;  /* Conservative: allow for text/data/bss/stack regions */
         }
 
         if (!owned) { sc_ret(regs) = (uint32_t)-ENOMEM; return; }