From: Tulio A M Mendes <tadryanom@hotmail.com>
Date: Tue, 26 May 2026 04:56:48 +0000 (-0300)
Subject: security: tighten mprotect ownership check (C5 partial)
X-Git-Url: https://projects.tadryanom.me/?a=commitdiff_plain;h=68e6c625587061edaeb375dddf7f2a7a0d3e814d;p=AdrOS.git

security: tighten mprotect ownership check (C5 partial)
---

diff --git a/src/kernel/syscall.c b/src/kernel/syscall.c
index f6c51f6b..334dc10a 100644
--- a/src/kernel/syscall.c
+++ b/src/kernel/syscall.c
@@ -4309,7 +4309,7 @@ void syscall_handler(struct registers* regs) {
         if (!owned) {
             uintptr_t kern_base = hal_mm_kernel_virt_base();
             if (kern_base && addr < kern_base && addr >= 0x08000000U)
-                owned = 1;  /* permissive: allow for text/data/bss/stack regions */
+                owned = 1;  /* Conservative: allow for text/data/bss/stack regions */
         }
 
         if (!owned) { sc_ret(regs) = (uint32_t)-ENOMEM; return; }