linux-kernel - Re: [PATCH] IA64,sparc: local DoS with corrupted ELFs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <20060907164207.16745087.akpm@osdl.org>
Date:	Thu, 7 Sep 2006 16:42:07 -0700
From:	Andrew Morton <akpm@...l.org>
To:	Willy Tarreau <w@....eu>
Cc:	Linus Torvalds <torvalds@...l.org>,
	Kirill Korotaev <dev@...nvz.org>,
	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
	Fernando Vazquez <fernando@....ntt.co.jp>,
	"David S. Miller" <davem@...emloft.net>, tony.luck@...el.com,
	linux-ia64@...r.kernel.org, stable@...nel.org, xemul@...nvz.org,
	devel@...nvz.org
Subject: Re: [PATCH] IA64,sparc: local DoS with corrupted ELFs

On Thu, 7 Sep 2006 22:07:14 +0200
Willy Tarreau <w@....eu> wrote:

> On Thu, Sep 07, 2006 at 08:17:04AM -0700, Linus Torvalds wrote:
> > 
> > 
> > On Thu, 7 Sep 2006, Kirill Korotaev wrote:
> > > 
> > > Does the patch below looks better?
> > 
> > Yes. 
> > 
> > Apart from the whitespace corruption, that is.
> > 
> > I don't know how to get mozilla to not screw up whitespace.

Me either.  I've had a bug report in the mozilla system for maybe four
years concerning space-stuffing.  Occasionally it comes to life but afaict
nothing ever changes.

I expect it'd be pretty easy to undo the space-stuffing in git. 
In extremis I just do s/^  /^ / and it works.  An automated solution would
need to recognise the appropriate headers (Format=Flowed, iirc).

> maybe by using it to download mutt or something saner ? :-)
> 
> More seriously, while we don't like email attachments because they make
> it impossible to comment on a patch, maybe we should encourage people
> with broken mailers to post small patches in both forms :
>   - pure text for human review (spaces are not much of a problem here)
>   - MIME to apply the patch.

argh.  That means that email contains two copies of the patch.  So it
applies with `patch --dry-run' then causes havoc with `patch'


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/