linux-kernel - Re: [RFC] ARM DMA mapping TODO, v1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 27 Apr 2011 20:15:29 -0400
From:	Valdis.Kletnieks@...edu
To:	Catalin Marinas <catalin.marinas@....com>
Cc:	Arnd Bergmann <arnd@...db.de>, linaro-mm-sig@...ts.linaro.org,
	linux-arm-kernel@...ts.infradead.org, linux-kernel@...r.kernel.org
Subject: Re: [RFC] ARM DMA mapping TODO, v1

On Wed, 27 Apr 2011 12:08:28 BST, Catalin Marinas said:

> The current version of the ARM ARM says "unpredictable". But this
> general definition of "unpredictable" does not allow it to deadlock
> (hardware) or have security implications. It is however allowed to
> corrupt data.

Not allowed to have security implications, but is allowed to corrupt data.

*boggle* :)

(The problem being, of course, that if the attacker is able to predict/control
what gets corrupted, it can easily end up leveraged into a security implication.)

Content of type "application/pgp-signature" skipped