linux-kernel - [GIT PULL] eCryptfs fixes for 4.0-rc3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20150304221433.GA25320@boyd>
Date:	Wed, 4 Mar 2015 16:14:34 -0600
From:	Tyler Hicks <tyhicks@...onical.com>
To:	Linus Torvalds <torvalds@...ux-foundation.org>
Cc:	Andrew Morton <akpm@...ux-foundation.org>,
	linux-kernel@...r.kernel.org, ecryptfs@...r.kernel.org
Subject: [GIT PULL] eCryptfs fixes for 4.0-rc3

Hi Linus,

The following changes since commit c517d838eb7d07bbe9507871fab3931deccff539:

  Linux 4.0-rc1 (2015-02-22 18:21:14 -0800)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/tyhicks/ecryptfs.git tags/ecryptfs-4.0-rc3-fixes

for you to fetch changes up to 6d65261a09adaa374c05de807f73a144d783669e:

  eCryptfs: don't pass fs-specific ioctl commands through (2015-03-03 02:03:56 -0600)

----------------------------------------------------------------
Fixes for proper ioctl handling and an untriggerable buffer overflow
- The eCryptfs ioctl handling functions should only pass known-good ioctl
  commands to the lower filesystem
- A static checker found a potential buffer overflow. Upon inspection, it is
  not triggerable due to input validation performed on the mount parameters.

----------------------------------------------------------------
Colin Ian King (1):
      eCryptfs: ensure copy to crypt_stat->cipher does not overrun

Tyler Hicks (1):
      eCryptfs: don't pass fs-specific ioctl commands through

 fs/ecryptfs/ecryptfs_kernel.h |  4 ++--
 fs/ecryptfs/file.c            | 34 ++++++++++++++++++++++++++++++----
 fs/ecryptfs/keystore.c        |  2 +-
 fs/ecryptfs/main.c            |  2 +-
 4 files changed, 34 insertions(+), 8 deletions(-)

Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)