linux-kernel - Re: [PATCH] usb: misc: legousbtower: Fix NULL pointer deference

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Tue, 20 Sep 2016 10:09:56 +0100
From:   James <james@...-e.com>
To:     Greg KH <gregkh@...uxfoundation.org>
Cc:     starblue@...rs.sourceforge.net,
        legousb-devel@...ts.sourceforge.net, linux-usb@...r.kernel.org,
        linux-kernel@...r.kernel.org, security@...nel.org,
        stable@...r.kernel.org
Subject: Re: [PATCH] usb: misc: legousbtower: Fix NULL pointer deference

Hi greg, 

	Many appologies, I did not see your patch attached/forgot it 
existed when I fixed this yesterday. I created this patch based on your
feedback from my original email on September 2nd. I have tested 
this patch with an emulated device and it fixes the vulnerability.
Again, applogies for the long delay and patch confusion.

Best regards,

James

On Tue, Sep 20, 2016 at 10:32:56AM +0200, Greg KH wrote:
>On Tue, Sep 20, 2016 at 10:18:21AM +0200, Oliver Neukum wrote:
>> On Tue, 2016-09-20 at 08:22 +0200, Greg KH wrote:
>> > When you sent this the last time (back on Sept 2), I sent you a
>> > "simpler" patch, the same one below, and asked you if that worked
>> > instead.  I never heard back, could you test this patch and see if it
>> > resolves the issue for you?
>>
>> As far as I can tell, your patches are identical.
>
>Hah, so they are.  James's original patch was not this one, sorry for
>not looking at it closer.
>
>James, any reason why you are passing off my patch as yours here?  Did
>you test mine and see that this did solve the problem?  You did change
>your changelog text a bit, to reflect the change between mine and yours,
>so I'm guessing that you did?
>
>thanks,
>
>greg k-h

Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)