linux-kernel - Re: [PATCH] spi: spidev: fix possible arithmetic overflow for multi-transfer message

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20160523111521.GQ8206@sirena.org.uk>
Date:	Mon, 23 May 2016 12:15:21 +0100
From:	Mark Brown <broonie@...nel.org>
To:	Dmitry Torokhov <dmitry.torokhov@...il.com>
Cc:	Ian Abbott <abbotti@....co.uk>,
	linux-spi <linux-spi@...r.kernel.org>,
	Dan Carpenter <dan.carpenter@...cle.com>,
	lkml <linux-kernel@...r.kernel.org>,
	"3.8+" <stable@...r.kernel.org>
Subject: Re: [PATCH] spi: spidev: fix possible arithmetic overflow for
 multi-transfer message

On Sat, May 21, 2016 at 09:50:35AM -0700, Dmitry Torokhov wrote:
> On Mon, Mar 23, 2015 at 10:50 AM, Ian Abbott <abbotti@....co.uk> wrote:
> > `spidev_message()` sums the lengths of the individual SPI transfers to
> > determine the overall SPI message length.  It restricts the total
> > length, returning an error if too long, but it does not check for

As documented in SubmittingPatches please send patches to the
maintainers for the code you would like to change.  The normal kernel
workflow is that people apply patches from their inboxes, if they aren't
copied they are likely to not see the patch at all and it is much more
difficult to apply patches.

Download attachment "signature.asc" of type "application/pgp-signature" (474 bytes)