linux-kernel - RE: [PATCH] Validate pointer when copying mount namespace.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <3917C05D9F83184EAA45CE249FF1B1DD026EA3D0@SHSMSX103.ccr.corp.intel.com>
Date:	Wed, 29 Apr 2015 03:21:25 +0000
From:	"Ma, Xindong" <xindong.ma@...el.com>
To:	Al Viro <viro@...IV.linux.org.uk>
CC:	"linux-fsdevel@...r.kernel.org" <linux-fsdevel@...r.kernel.org>,
	"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Subject: RE: [PATCH] Validate pointer when copying mount namespace.

> Details, please.  How do you reproduce that behaviour?
> 
> I don't like that loop in its current form (it relies upon _not_ encountering the
> same ->mnt_root in the parts of tree we hadn't copied), but your change
> doesn't make it any better.  Seeing a reproducer would be useful in sorting it
> out; in this form the patch papers over the bug rather than fixing it.

The issue is reproduced during monkey test on android devices. Seems it's very hard to reproduce it again. I'll continue to perform the test and review the code.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/