linux-kernel - Re: [PATCH 1/1] comedi: ni_usb6501: fix transfer-buffer overflows

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Sun, 5 Jun 2022 14:49:43 +0200
From:   Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To:     Xiaohui Zhang <ruc_zhangxiaohui@....com>
Cc:     Ian Abbott <abbotti@....co.uk>,
        H Hartley Sweeten <hsweeten@...ionengravers.com>,
        Johan Hovold <johan@...nel.org>, linux-kernel@...r.kernel.org
Subject: Re: [PATCH 1/1] comedi: ni_usb6501: fix transfer-buffer overflows

On Sun, Jun 05, 2022 at 08:43:22PM +0800, Xiaohui Zhang wrote:
> From: xiaohuizhang98 <ruc_zhangxiaohui@....com>
> 
> We detected a suspected bug with our code clone detection tool.

What tool exactly?

Please read Documentation/process/researcher-guidelines.rst for how to
write a good changelog when you are using automated tools like this.

> 
> Similar to the handling of vmk80xx_alloc_usb_buffers in commit
> a23461c47482("comedi: vmk80xx: fix transfer-buffer overflows"),
> we thought a patch might be needed here as well.
> 
> The driver uses endpoint-sized USB transfer buffers but up until
> recently had no sanity checks on the sizes.
> 
> Signed-off-by: xiaohuizhang98 <ruc_zhangxiaohui@....com>

I strongly doubt you sign legal documents like "xiaohuizhang98", right?

thanks,

greg k-h