linux-kernel - Re: [patch v3] checkpatch: Signature format verification

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Mon, 23 May 2011 11:09:26 -0700
From:	Joe Perches <joe@...ches.com>
To:	anish singh <anish198519851985@...il.com>
Cc:	Randy Dunlap <rdunlap@...otime.net>, davej@...hat.com,
	rostedt@...dmis.org, apw@...dowen.org, akpm@...ux-foundation.org,
	vapier@...too.org, linux-kernel@...r.kernel.org,
	man.k1983@...il.com
Subject: Re: [patch v3] checkpatch: Signature format verification

On Mon, 2011-05-23 at 23:07 +0530, anish singh wrote:
> On Mon, May 23, 2011 at 10:48 PM, Joe Perches <joe@...ches.com> wrote:
> On Mon, 2011-05-23 at 22:36 +0530, anish singh wrote:
> > >  if ($1 !~ /[\sa-zA-Z\"]*\s<.*>/i) {
> > >  WARN("Space required b/w Full Name & Mail-id:\n" .
> > >       $herecurr);
> > > Quote has been taken care too now.
> > If you're going to try to validate email addresses,
> > please do it reasonably correctly or not at all.
> > At a minimum you need to add digits, single quote,
> > period, and comma.
> I think there is a confusion.Let me state it once again.
> This patch is used to check space between "signs" & name/ name &
> mail-id.

I'm not confused.

You are only checking names with this form (without quotes)
"First Last <fl@...ain.tld>", now quoted as well.

Names can have many forms.

8 bit chars, commas, quotes, apostrophes, all sorts of things.

for instance:

$ git log v2.6.36.. | grep -P "by:.*" | \
	grep -vP "by:[\sa-zA-Z\"]*\s<.*>" | \
	sort | uniq -c | sort -rn | head -20
   3421     Signed-off-by: David S. Miller <davem@...emloft.net>
   3137     Signed-off-by: Greg Kroah-Hartman <gregkh@...e.de>
   2232     Signed-off-by: John W. Linville <linville@...driver.com>
    386     Signed-off-by: Wey-Yi Guy <wey-yi.w.guy@...el.com>
    292     Signed-off-by: Gustavo F. Padovan <padovan@...fusion.mobi>
    257     Signed-off-by: Uwe Kleine-König <u.kleine-koenig@...gutronix.de>
    223     Signed-off-by: Rafael J. Wysocki <rjw@...k.pl>
    193     Signed-off-by: J. Bruce Fields <bfields@...hat.com>
    167     Signed-off-by: "Theodore Ts'o" <tytso@....edu>
    166     Signed-off-by: H. Peter Anvin <hpa@...ux.intel.com>
    159     Signed-off-by: Paul E. McKenney <paulmck@...ux.vnet.ibm.com>
    126     Signed-off-by: Jean-François Moine <moinejf@...e.fr>
    121     Signed-off-by: Luis R. Rodriguez <lrodriguez@...eros.com>
    107     Signed-off-by: Michał Mirosław <mirq-linux@...e.qmqm.pl>
    106     Acked-by: David S. Miller <davem@...emloft.net>
    103     Signed-off-by: Rafał Miłecki <zajec5@...il.com>
     76     Signed-off-by: Aneesh Kumar K.V <aneesh.kumar@...ux.vnet.ibm.com>
     69     Signed-off-by: Lars-Peter Clausen <lars@...afoo.de>
     66     Signed-off-by: Stephen M. Cameron <scameron@...rdog.cce.hp.com>
     63     Signed-off-by: Justin P. Mattock <justinmattock@...il.com>

I still think what I suggested after your first patch
attempt is simple and appropriate.

our $Valid_Signatures "(?:Signed-off-by:|Reviewed-by:|Acked-by:)"
...
        if ($line =~ /^(\s*)($ValidSignatures)(\s*)(.*)$/i) {
                my $space_before = $1;
                my $sign_off = $2;
                my $space_after = $3;
                my $email = $4;
                if (defined $space_before && $space_before ne "") {
                        warning (no space before...)
                }
                if ($sign_off !~ /$Valid_Signature/) {
                        warning (signature case...)
                }
                if (!defined $space_after || $space_after ne " ") {
                        warning (need only one space after colon...)
                }
                if (!validate_email($4)) {
                        warning (bad email...)


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/