linux-kernel - Re: [PATCH 1/3] setup_arg_pages: diagnose excessive argument size

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4C8FF89B.24404.153DFD7D@pageexec.freemail.hu>
Date:	Wed, 15 Sep 2010 00:35:07 +0200
From:	pageexec@...email.hu
To:	Roland McGrath <roland@...hat.com>
CC:	Linus Torvalds <torvalds@...ux-foundation.org>,
	Andrew Morton <akpm@...ux-foundation.org>,
	linux-kernel@...r.kernel.org, oss-security@...ts.openwall.com,
	Solar Designer <solar@...nwall.com>,
	Kees Cook <kees.cook@...onical.com>,
	Al Viro <viro@...iv.linux.org.uk>,
	Oleg Nesterov <oleg@...hat.com>,
	KOSAKI Motohiro <kosaki.motohiro@...fujitsu.com>,
	Neil Horman <nhorman@...driver.com>,
	linux-fsdevel@...r.kernel.org,
	Brad Spengler <spender@...ecurity.net>,
	Eugene Teo <eugene@...hat.com>
Subject: Re: [PATCH 1/3] setup_arg_pages: diagnose excessive argument size

On 14 Sep 2010 at 12:33, Roland McGrath wrote:

> I have no special interest in this area.  I gave my opinions and
> advice because I was CC'd, and then submitted some patches myself
> because I was asked to.  I can't really keep track of all the
> formalities.  The CC list on my submissions represented the set
> of people I knew to be involved in the discussion.  I'm sorry if
> you felt slighted.  I just pay attention to the code, not the
> personalities.

i was referring to Brad, since he reported this (and the wireless
heap infoleak which he also wasn't credited for). anyway, we won't be
submitting any further vulnerability reports, so no need to worry about
any 'formalities' in the future.

>  The most reliable way to make sure your name is
> associated with a change is to submit patches yourself in a form
> that Linus wants to merge.

his conditions are unacceptable and therefore it's not going to happen.

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/