linux-kernel - Re: [oss-security] Re: [PATCH v2 4/4] ozwpan: unchecked signed subtraction leads to DoS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAHmME9qbJ-t0OpKLTOfKKOJXDu1Ccq3VjJmMCV3efaPN7TWKGQ@mail.gmail.com>
Date:	Thu, 28 May 2015 17:37:59 +0200
From:	"Jason A. Donenfeld" <Jason@...c4.com>
To:	Dan Carpenter <dan.carpenter@...cle.com>
Cc:	Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	devel@...verdev.osuosl.org, linux-kernel@...r.kernel.org,
	Shigekatsu Tateno <shigekatsu.tateno@...el.com>
Subject: Re: [oss-security] Re: [PATCH v2 4/4] ozwpan: unchecked signed
 subtraction leads to DoS

On Thu, May 28, 2015 at 1:04 PM, Dan Carpenter <dan.carpenter@...cle.com> wrote:
> It's really not simpler to understand though.

Greg - do you want me to resubmit a v3 for this, or does it not really
matter and we can address this in another series? Personally, I'm
erring on the side of wanting to get *something* merged sooner, rather
than doing a v3.

> Maybe we should just delete these ozwpan drivers entirely...  They were
> merged when Ozmodevices was its own company and I don't think anyone is
> working on them any more.

The driver is most certainly still in widespread use. I'd caution
against dropping it from the tree entirely.

The maintainer was changed just last year with this commit, when
Shigekatsu Tateno became maintainer instead of Rupesh Gujare:

commit 96747a8f4e7d187f236ad392d86a37a4d1ba0b32
Author: Rupesh Gujare <rupesh.gujare@...el.com>
Date:   Mon May 19 15:17:30 2014 +0100

    staging: ozwpan: Change Maintainer

    I will be not able to work on ozwpan driver anymore.
    Remove my name & add Tateno as maintainer.

    Signed-off-by: Rupesh Gujare <rupesh.gujare@...el.com>
    Acked-by: Shigekatsu Tateno <shigekatsu.tateno@...el.com>
    Signed-off-by: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/