lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <ZYThUpCUMJUMP3Oy@codewreck.org>
Date: Fri, 22 Dec 2023 10:07:30 +0900
From: Dominique Martinet <asmadeus@...ewreck.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: Christian Schoenebeck <linux_oss@...debyte.com>,
	Eric Van Hensbergen <ericvh@...nel.org>, v9fs@...ts.linux.dev,
	linux-kernel@...r.kernel.org
Subject: [GIT PULL] 9p fixes for 6.7-rc7

The following changes since commit 2cc14f52aeb78ce3f29677c2de1f06c0e91471ab:

  Linux 6.7-rc3 (2023-11-26 19:59:33 -0800)

are available in the Git repository at:

  https://github.com/martinetd/linux tags/9p-for-6.7-rc7

for you to fetch changes up to ff49bf1867578f23a5ffdd38f927f6e1e16796c4:

  net: 9p: avoid freeing uninit memory in p9pdu_vreadf (2023-12-13 05:44:30 +0900)

----------------------------------------------------------------
Two small fixes scheduled for stable trees

A tracepoint fix that's been reading past the end of messages forever,
but semi-recently also went over the end of the buffer.
And a potential incorrectly freeing garbage in pdu parsing error path

----------------------------------------------------------------
Fedor Pchelkin (1):
      net: 9p: avoid freeing uninit memory in p9pdu_vreadf

JP Kobryn (1):
      9p: prevent read overrun in protocol dump tracepoint

 include/trace/events/9p.h | 11 +++++++----
 net/9p/protocol.c         | 17 +++++++++++++----
 2 files changed, 20 insertions(+), 8 deletions(-)

Cheers,
-- 
Dominique

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ