linux-kernel - Re: [PATCH] hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <168561308.256760721.1744127900601.JavaMail.zimbra@nod.at>
Date: Tue, 8 Apr 2025 17:58:20 +0200 (CEST)
From: Richard Weinberger <richard@....at>
To: "Darrick J. Wong" <djwong@...nel.org>
Cc: Richard Weinberger <richard.weinberger@...il.com>, 
	Christian Brauner <brauner@...nel.org>, 
	Cengiz Can <cengiz.can@...onical.com>, 
	Attila Szasz <szasza.contact@...il.com>, 
	Greg Kroah-Hartman <gregkh@...uxfoundation.org>, 
	Salvatore Bonaccorso <carnil@...ian.org>, 
	linux-fsdevel <linux-fsdevel@...r.kernel.org>, 
	linux-kernel <linux-kernel@...r.kernel.org>, 
	lvc-patches@...uxtesting.org, dutyrok@...linux.org, 
	syzbot+5f3a973ed3dfb85a6683@...kaller.appspotmail.com, 
	stable <stable@...r.kernel.org>, Al Viro <viro@...iv.linux.org.uk>
Subject: Re: [PATCH] hfs/hfsplus: fix slab-out-of-bounds in
 hfs_bnode_read_key

----- Ursprüngliche Mail -----
> Von: "Darrick J. Wong" <djwong@...nel.org>
>> IMHO guestmount and other userspace filesystem implementations should
>> be the default
>> for such mounts.
> 
> Agree.  I don't know if they (udisks upstream) have any good way to
> detect that a userspace filesystem driver is available for a given
> filesystem.  Individual fuse drivers don't seem to have a naming
> convention (fusefat, fuse2fs) though at least on Debian some of them
> seem to end up as /sbin/mount.fuse.$FSTYPE.
> 
> guestmount seems to boot the running kernel in qemu and use that?  So I
> guess it's hard for guestmount itself even to tell you what formats it
> supports?  I'm probably just ignorant on that issue.

Yes, libguestfs runs a Linux kernel inside. It support qemu, UserModeLinux
and IIRC it had even a PoC for LKL (Linux Kernel Library).
That said, the performance is not optimal but I'm sure with reasonable
effort it could be improved at lot.
At least to work with odd filesystem in a satisfying way.

Thanks,
//richard