linux-kernel - Re: [PATCH 3.18 34/59] tty: Prevent ldisc drivers from re-using stale tty fields

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Wed, 24 May 2017 17:03:46 +0200
From:   Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To:     Alan Cox <gnomes@...rguk.ukuu.org.uk>
Cc:     linux-kernel@...r.kernel.org, stable@...r.kernel.org,
        Tilman Schmidt <tilman@...p.cc>,
        Sasha Levin <sasha.levin@...cle.com>,
        Peter Hurley <peter@...leysoftware.com>,
        Amit Pundir <amit.pundir@...aro.org>
Subject: Re: [PATCH 3.18 34/59] tty: Prevent ldisc drivers from re-using
 stale tty fields

On Wed, May 24, 2017 at 02:44:33PM +0100, Alan Cox wrote:
> On Tue, 23 May 2017 22:10:02 +0200
> Greg Kroah-Hartman <gregkh@...uxfoundation.org> wrote:
> 
> > 3.18-stable review patch.  If anyone has any objections, please let me know.
> > 
> 
> Thiis is a patch designed to cause a crash in order to stop future errors
> occurring. It seems less than ideal as a stable candidate.

It has been in the 4.4-stable tree since 4.4.34, which was released last
November, and now it seems the Google "security" team thought it was
worthwhile to backport to 3.18 for their Android devices as well.  So
I'll take it, it can't hurt, and crashing is usually better than odd
errors.

thanks,

greg k-h