linux-kernel - Re: [Bug Report] OOB-read BUG in HFS+ filesystem

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20250415-deportation-lauftraining-17ff7ee0b6f5@brauner>
Date: Tue, 15 Apr 2025 13:25:03 +0200
From: Christian Brauner <brauner@...nel.org>
To: Johannes Thumshirn <Johannes.Thumshirn@....com>
Cc: David Sterba <dsterba@...e.cz>, 
	Linus Torvalds <torvalds@...ux-foundation.org>, Matthew Wilcox <willy@...radead.org>, 
	now4yreal <now4yreal@...mail.com>, Jan Kara <jack@...e.com>, Viro <viro@...iv.linux.org.uk>, 
	Bacik <josef@...icpanda.com>, Stone <leocstone@...il.com>, Sandeen <sandeen@...hat.com>, 
	Johnson <jeff.johnson@....qualcomm.com>, linux-fsdevel <linux-fsdevel@...r.kernel.org>, 
	linux-kernel <linux-kernel@...r.kernel.org>
Subject: Re: [Bug Report] OOB-read BUG in HFS+ filesystem

On Tue, Apr 15, 2025 at 10:23:27AM +0000, Johannes Thumshirn wrote:
> On 15.04.25 11:31, Christian Brauner wrote:
> > On Tue, Apr 15, 2025 at 09:16:58AM +0000, Johannes Thumshirn wrote:
> >> On 15.04.25 09:52, Christian Brauner wrote:
> >>> Ok, I'm open to trying. I'm adding a deprecation message when initating
> >>> a new hfs{plus} context logged to dmesg and then we can try and remove
> >>> it by the end of the year.
> >>>
> >>>
> >>
> >> Just a word of caution though, (at least Intel) Macs have their EFI ESP
> >> partition on HFS+ instead of FAT. I don't own an Apple Silicon Mac so I
> >> can't check if it's there as well.
> > 
> > Yeah, someone mentioned that. Well, then we hopefully have someone
> > stepping up to for maintainership.
> > 
> 
> I hope you aren't considering me here :D. I'm lacking the time to 
> volunteer as a Maintainer but I can offer to look into some fixes.

No no, I'm aware. I'm just saying that if this is really crucial this
Mac use-case then we better find someone to take care of it properly.