From 5b3ac1bab2ec99d610ccbf4421775981f3b6a1ca Mon Sep 17 00:00:00 2001 From: Andrew Kreimer Date: Sun, 7 Sep 2025 18:26:27 +0300 Subject: [PATCH] Fix a typo There is a typo in the text: "a" -> "an", fix it. --- lkmpg.tex | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lkmpg.tex b/lkmpg.tex index 76322b1b..fafa0b92 100644 --- a/lkmpg.tex +++ b/lkmpg.tex @@ -1840,7 +1840,7 @@ \subsection{Flashing keyboard LEDs} From v4.14 to v4.15, the timer API made a series of changes to improve memory safety. A buffer overflow in the area of a \cpp|timer_list| structure may be able to overwrite the \cpp|function| and \cpp|data| fields, providing the attacker with a way to use return-oriented programming (ROP) to call arbitrary functions within the kernel. -Also, the function prototype of the callback, containing a \cpp|unsigned long| argument, will prevent work from any type checking. +Also, the function prototype of the callback, containing an \cpp|unsigned long| argument, will prevent work from any type checking. Furthermore, the function prototype with \cpp|unsigned long| argument may be an obstacle to the forward-edge protection of \textit{control-flow integrity}. Thus, it is better to use a unique prototype to separate from the cluster that takes an \cpp|unsigned long| argument. The timer callback should be passed a pointer to the \cpp|timer_list| structure rather than an \cpp|unsigned long| argument.