linux-kernel - Re: [PATCH v2] aoe: fix the potential use-after-free problem in more places

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <74d3454d-6141-462d-9de8-b11cf6ac814c@web.de>
Date: Mon, 24 Jun 2024 13:43:25 +0200
From: Markus Elfring <Markus.Elfring@....de>
To: Chun-Yi Lee <jlee@...e.com>, linux-block@...r.kernel.org
Cc: Chun-Yi Lee <joeyli.kernel@...il.com>, stable@...r.kernel.org,
 LKML <linux-kernel@...r.kernel.org>, "David S. Miller"
 <davem@...emloft.net>, Jens Axboe <axboe@...nel.dk>,
 Justin Sanders <justin@...aid.com>, Kirill Korotaev <dev@...nvz.org>,
 Nicolai Stange <nstange@...e.com>, Pavel Emelianov <xemul@...nvz.org>
Subject: Re: [PATCH v2] aoe: fix the potential use-after-free problem in more
 places

>>>                   … So they should also use dev_hold() to increase the
>>> refcnt of skb->dev.
>> …
>>
>>   reference counter of “skb->dev”?
>
> Yes, I will update my wording.

Would you like to improve such a change description also with imperative wordings?
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/Documentation/process/submitting-patches.rst?h=v6.10-rc4#n94

How do you think about the text “Prevent use-after-free issues at more places”
for a summary phrase?

Regards,
Markus