linux-kernel - Re: KASAN: slab-out-of-bounds Read in string (2)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAOQ4uxh_WLVPnLt=r5j5wm7gET=C64RKGexGVdNyJK0d0aMr5g@mail.gmail.com>
Date:   Thu, 25 Oct 2018 18:17:25 +0300
From:   Amir Goldstein <amir73il@...il.com>
To:     "J. Bruce Fields" <bfields@...ldses.org>
Cc:     Jeff Layton <jlayton@...nel.org>,
        Dan Carpenter <dan.carpenter@...cle.com>,
        Dmitry Vyukov <dvyukov@...gle.com>,
        syzbot+376cea2b0ef340db3dd4@...kaller.appspotmail.com,
        Miklos Szeredi <miklos@...redi.hu>,
        overlayfs <linux-unionfs@...r.kernel.org>,
        linux-kernel <linux-kernel@...r.kernel.org>,
        Petr Mladek <pmladek@...e.com>,
        "Steven Rostedt (VMware)" <rostedt@...dmis.org>,
        Sergey Senozhatsky <sergey.senozhatsky@...il.com>,
        syzkaller-bugs@...glegroups.com, Jan Harkes <jaharkes@...cmu.edu>,
        Mark Fasheh <mark@...heh.com>
Subject: Re: KASAN: slab-out-of-bounds Read in string (2)

On Thu, Oct 25, 2018 at 6:02 PM Bruce Fields <bfields@...ldses.org> wrote:

> > > So I guess it has fallen between the cracks.
> > > Feel free to send a patch to Jeff.
> > >
> > > Thanks,
> > > Amir.
> >
> > Actually, this should probably go to Bruce, as he mostly takes care of
> > lockd. Patch looks correct though.
>
> Yes, if you could resend I'd be happy to handle it.--b.

Attached.
Thanks,
Amir.

View attachment "0001-lockd-fix-access-beyond-unterminated-strings-in-prin.patch" of type "text/x-patch" (999 bytes)