netdev - Re: [PATCH] bonding: Fix use after free in unregister path

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Wed, 20 Jun 2007 17:09:00 -0700
From:	Chris Wright <chrisw@...s-sol.org>
To:	Jeff Garzik <jeff@...zik.org>
Cc:	Jay Vosburgh <fubar@...ibm.com>,
	Stephen Hemminger <shemminger@...ux-foundation.org>,
	"David S. Miller" <davem@...emloft.net>,
	Dan Aloni <da-x@...atomic.org>,
	Chad Tindel <ctindel@...rs.sourceforge.net>,
	Kenji Kaneshige <kaneshige.kenji@...fujitsu.com>,
	netdev@...r.kernel.org,
	linux-kernel <linux-kernel@...r.kernel.org>,
	Andrew Morton <akpm@...ux-foundation.org>,
	bonding-devel@...ts.sourceforge.net
Subject: Re: [PATCH] bonding: Fix use after free in unregister path

* Jeff Garzik (jeff@...zik.org) wrote:
> Jay Vosburgh wrote:
> >	The following patch (based on a patch from Stephen Hemminger
> ><shemminger@...ux-foundation.org>) removes use after free conditions in
> >the unregister path for the bonding master.  Without this patch, an
> >operation of the form "echo -bond0 > /sys/class/net/bonding_masters"
> >would trigger a NULL pointer dereference in sysfs.  I was not able to
> >induce the failure with the non-sysfs code path, but for consistency I
> >updated that code as well.
> >
> >	I also did some testing of the bonding /proc file being open
> >while the bond is being deleted, and didn't see any problems there.
> >
> >Signed-off-by: Jay Vosburgh <fubar@...ibm.com>
> 
> applied to #upstream-fixes

This was originally discovered on 2.6.21.5 IIRC, so plan to send this
to -stable as well?

thanks,
-chris
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html