linux-kernel - Re: Userspace woes with 5.1.5 due to TIPC

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Thu, 30 May 2019 22:47:17 +0200
From:   Mihai Moldovan <ionic@...ic.de>
To:     Jon Maloy <jon.maloy@...csson.com>,
        "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Cc:     Ying Xue <ying.xue@...driver.com>
Subject: Re: Userspace woes with 5.1.5 due to TIPC

* On 5/30/19 9:51 PM, Jon Maloy wrote:
> Make sure the following three commits are present in TIPC *after* the offending commit:
> 
> commit 532b0f7ece4c "tipc: fix modprobe tipc failed after switch order of device registration"

This *is* the offending commit, as far as I understand. Merely rebased in
linux-stable, and hence having a different SHA, but mentioning the original SHA
(i.e., 532b0f7ece4c) in its commit message.

> Since that patch one was flawed it had to be reverted:
> commit 5593530e5694  ""Revert tipc: fix modprobe tipc failed after switch order of device registration"
> 
> It was then replaced with this one: 
> commit 526f5b851a96 "tipc: fix modprobe tipc failed after switch order of device registration"

Okay, these two are not part of 5.1.5. I've backported them (and only these two)
to 5.1.5 and the issue(s) seem to be gone. Definitely something that should be
backported to/included in 5.1.6.

Thanks for pointing all that out! Unfortunately I didn't add anything useful but
noise, since you obviously already knew, that this commit was broken. I'd urge
Greg to release a new stable version including the fixes soon, if possible,
though, for not being able to start/use userspace browsers sounds like a pretty
bad regression to me.

Mihai

Download attachment "signature.asc" of type "application/pgp-signature" (900 bytes)