linux-hardening - Re: warning upon association with latest kernel

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:   Mon, 21 Nov 2022 20:31:07 -0800
From:   Kees Cook <keescook@...omium.org>
To:     Oliver Neukum <oneukum@...e.com>
Cc:     Gregory Greenman <gregory.greenman@...el.com>,
        linux-wireless@...r.kernel.org, linux-hardening@...r.kernel.org
Subject: Re: warning upon association with latest kernel

On Wed, Nov 09, 2022 at 04:26:39PM +0100, Oliver Neukum wrote:
> I am getting this warning when I connect to my home
> wifi upon boot:
> 
> [...]
> [ 1321.321889] memcpy: detected field-spanning write (size 16) of single field "&compat_event->pointer" at net/wireless/wext-core.c:624 (size 4)

This should be fixed by commit e3e6e1d16a4c ("wifi: wext: use flex array
destination for memcpy()").

> [...]
> Head commit is:
> 
> commit f141df371335645ce29a87d9683a3f79fba7fd67 (origin/master, origin/HEAD)
> Merge: f49b2d89fb10 986d93f55bde
> Author: Linus Torvalds <torvalds@...ux-foundation.org>
> Date:   Tue Nov 8 12:30:29 2022 -0800
> 
>     Merge tag 'audit-pr-20221107' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit

Are you sure that's the same kernel? The stated commit no longer has
"&compat_event->pointer" as a memcpy argument...

-- 
Kees Cook