linux-kernel - Re: cifs mount regression in 4.8 and 4.4 stable

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1474557429.14139.10.camel@redhat.com>
Date:   Thu, 22 Sep 2016 16:17:09 +0100
From:   Sachin Prabhu <sprabhu@...hat.com>
To:     Seth Forshee <seth.forshee@...onical.com>,
        Steve French <sfrench@...ba.org>,
        Aurelien Aptel <aaptel@...e.com>
Cc:     Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
        linux-cifs@...r.kernel.org, linux-kernel@...r.kernel.org,
        stable@...r.kernel.org
Subject: Re: cifs mount regression in 4.8 and 4.4 stable

On Thu, 2016-09-22 at 10:09 -0500, Seth Forshee wrote:
> We've received reports from users of a cifs mount regression in our
> 4.4-based kernel, e.g. [1]. It is fixed by reverting the follwing
> commit
> from 4.8 which was applied to 4.4 stable:
> 
>  a6b5058 fs/cifs: make share unaccessible at root level mountable
> 
> Testing against 4.8-rc7 shows that the problem is present there as
> well.
> 
> Thanks,
> Seth
> 
> [1] http://bugs.launchpad.net/bugs/1626112

Hello Seth, 

We have identified some regressions introduced by the mentioned patch
These include

a) mounting of DFS shares breaks. The fix is included in Steve's tree
at
https://git.samba.org/?p=sfrench/cifs-2.6.git;a=commit;h=de5233745cd59c
f5853d963ad216067788a87594

b) mounting of the same share with different paths breaks. Fixed by
upstream commit	c1d8b24d18192764fe82067ec6aa8d4c3bf094e0

c) memory leaks in mounting fixed by upstream 	4214ebf4654798309
364d0c678b799e402f38288

Can you please share any other reports not mentioned above?

Sachin Prabhu