linux-kernel - Re: flaw in "nf_tables: add reject module for NFPROTO

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20140212210347.GB6563@redhat.com>
Date:	Wed, 12 Feb 2014 16:03:47 -0500
From:	Dave Jones <davej@...hat.com>
To:	Kees Cook <kees@...flux.net>
Cc:	Pablo Neira Ayuso <pablo@...filter.org>,
	Patrick McHardy <kaber@...sh.net>, linux-kernel@...r.kernel.org
Subject: Re: flaw in "nf_tables: add reject module for NFPROTO_INET"

On Wed, Feb 12, 2014 at 12:54:53PM -0800, Kees Cook wrote:
 > On Wed, Feb 12, 2014 at 03:50:37PM -0500, Dave Jones wrote:
 > > On Wed, Feb 12, 2014 at 12:43:08PM -0800, Kees Cook wrote:
 > >  > Hi,
 > >  > 
 > >  > This seems like a legit problem detected by Coverity. Looks like a break is
 > >  > missing?
 > > 
 > > yup, reported this morning. 
 > > (Also note that I changed the state in coverity once Patrick confirmed it)
 > 
 > Ah, sorry for the noise then! I missed Dave's earlier the bug report email.

I wonder if it's worth getting a coverity@...r.kernel.org list set up for
cc'ing stuff like this to reduce dupe reports (though this is the first I
recall in a while), and for review of patches etc before forwarding them on
to their relevant list/maintainers.

thoughts?

	Dave

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/