linux-kernel - [GIT PULL] fanotify use-after-free fixes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20140129131204.GC8749@quack.suse.cz>
Date:	Wed, 29 Jan 2014 14:12:04 +0100
From:	Jan Kara <jack@...e.cz>
To:	Linus Torvalds <torvalds@...ux-foundation.org>
Cc:	linux-fsdevel@...r.kernel.org, LKML <linux-kernel@...r.kernel.org>,
	Jiri Kosina <jkosina@...e.cz>,
	Dave Jones <davej@...oraproject.org>
Subject: [GIT PULL] fanotify use-after-free fixes

  Hello Linus,

  could you please pull from

git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs.git for_linus

The pull contains three fixes for the fanotify use after free problems guys
were reporting. I have ended up with different lifetime rules for struct
fanotify_event_info depending on whether it is for permission event or
normal event which isn't ideal. My plan is to split these into two
different structures (as permission events need larger struct anyway) which
will make the rules trivial again. But that can wait for later I guess (but
I can add the patch to the pile if you want), now I wanted to make -rc1
boot for these guys.

Top of the tree is 85816794240b. The full shortlog is:

Jan Kara (3):
      fanotify: Fix use after free in mask checking
      fsnotify: Do not return merged event from fsnotify_add_notify_event()
      fanotify: Fix use after free for permission events

The diffstat is

 fs/notify/fanotify/fanotify.c        | 40 ++++++++++++++++++------------------
 fs/notify/fanotify/fanotify.h        |  7 +++++++
 fs/notify/fanotify/fanotify_user.c   |  7 ++++++-
 fs/notify/inotify/inotify_fsnotify.c | 19 +++++++----------
 fs/notify/notification.c             | 24 +++++++++++-----------
 include/linux/fsnotify_backend.h     |  8 ++++----
 6 files changed, 56 insertions(+), 49 deletions(-)

							Thanks
								Honza
-- 
Jan Kara <jack@...e.cz>
SUSE Labs, CR
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/