linux-kernel - Re: [PATCH] fs: Fix filename init after recent refactoring

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAGudoHFvgCeJC4HH_1d5x6qUEkTGdCPruid7MQFP+U5Ogb=PNw@mail.gmail.com>
Date: Thu, 10 Apr 2025 00:07:06 +0200
From: Mateusz Guzik <mjguzik@...il.com>
To: Song Liu <song@...nel.org>
Cc: linux-kernel@...r.kernel.org, linux-fsdevel@...r.kernel.org, 
	viro@...iv.linux.org.uk, jack@...e.cz, kernel-team@...a.com, 
	Christian Brauner <brauner@...nel.org>
Subject: Re: [PATCH] fs: Fix filename init after recent refactoring

ouch, I'm so sorry :)

On Thu, Apr 10, 2025 at 12:05 AM Song Liu <song@...nel.org> wrote:
>
> getname_flags() should save __user pointer "filename" in filename->uptr.
> However, this logic is broken by a recent refactoring. Fix it by passing
> __user pointer filename to helper initname().
>
> Fixes: 611851010c74 ("fs: dedup handling of struct filename init and refcounts bumps")
> Cc: Mateusz Guzik <mjguzik@...il.com>
> Cc: Christian Brauner <brauner@...nel.org>
> Signed-off-by: Song Liu <song@...nel.org>
> ---
>  fs/namei.c | 8 ++++----
>  1 file changed, 4 insertions(+), 4 deletions(-)
>
> diff --git a/fs/namei.c b/fs/namei.c
> index 360a86ca1f02..8510ff53f12e 100644
> --- a/fs/namei.c
> +++ b/fs/namei.c
> @@ -125,9 +125,9 @@
>
>  #define EMBEDDED_NAME_MAX      (PATH_MAX - offsetof(struct filename, iname))
>
> -static inline void initname(struct filename *name)
> +static inline void initname(struct filename *name, const char __user *uptr)
>  {
> -       name->uptr = NULL;
> +       name->uptr = uptr;
>         name->aname = NULL;
>         atomic_set(&name->refcnt, 1);
>  }
> @@ -210,7 +210,7 @@ getname_flags(const char __user *filename, int flags)
>                         return ERR_PTR(-ENAMETOOLONG);
>                 }
>         }
> -       initname(result);
> +       initname(result, filename);
>         audit_getname(result);
>         return result;
>  }
> @@ -268,7 +268,7 @@ struct filename *getname_kernel(const char * filename)
>                 return ERR_PTR(-ENAMETOOLONG);
>         }
>         memcpy((char *)result->name, filename, len);
> -       initname(result);
> +       initname(result, NULL);
>         audit_getname(result);
>         return result;
>  }
> --
> 2.47.1
>


-- 
Mateusz Guzik <mjguzik gmail.com>