lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <20190425155745.GB4739@mit.edu> Date: Thu, 25 Apr 2019 11:57:45 -0400 From: "Theodore Ts'o" <tytso@....edu> To: Barret Rhoden <brho@...gle.com> Cc: Andreas Dilger <adilger.kernel@...ger.ca>, syzbot+f584efa0ac7213c226b7@...kaller.appspotmail.com, Jan Kara <jack@...e.cz>, stable@...r.kernel.org, linux-ext4@...r.kernel.org, linux-kernel@...r.kernel.org Subject: Re: [PATCH v2] ext4: fix use-after-free race with debug_want_extra_isize On Thu, Apr 18, 2019 at 11:59:37AM -0400, Barret Rhoden wrote: > When remounting with debug_want_extra_isize, we were not performing the > same checks that we do during a normal mount. That allowed us to set a > value for s_want_extra_isize that reached outside the s_inode_size. > > Reported-by: syzbot+f584efa0ac7213c226b7@...kaller.appspotmail.com > Reviewed-by: Jan Kara <jack@...e.cz> > Signed-off-by: Barret Rhoden <brho@...gle.com> > Cc: stable@...r.kernel.org # 4.14.111 Applied, thanks. - Ted
Powered by blists - more mailing lists