linux-kernel - Re: fbcon: remove soft scrollback code (missing Doc. patch)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <X/3KR80YekApObf8@kroah.com>
Date:   Tue, 12 Jan 2021 17:11:51 +0100
From:   Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To:     Phillip Susi <phill@...susis.net>
Cc:     Linus Torvalds <torvalds@...ux-foundation.org>,
        Pavel Machek <pavel@....cz>,
        Randy Dunlap <rdunlap@...radead.org>,
        LKML <linux-kernel@...r.kernel.org>,
        "linux-doc@...r.kernel.org" <linux-doc@...r.kernel.org>,
        Daniel Vetter <daniel@...ll.ch>
Subject: Re: fbcon: remove soft scrollback code (missing Doc. patch)

On Tue, Jan 12, 2021 at 10:00:09AM -0500, Phillip Susi wrote:
> 
> Linus Torvalds writes:
> 
> > It really was buggy, with security implications. And we have no maintainers.
> 
> Could you be more specific?  I can't try to fix it if I don't understand
> what is wrong with it.  Are there any bug reports or anything I could
> look at?

Along with what Daniel has already pointed out, just look at all of the
old syzbot reports for the code in this area.  Try fixing one of those
reports in an older kernel to give yourself an idea of the issues
involved.

Best of luck!

greg k-h