linux-kernel - Re: [PATCH v2] media: dvb_demux: fix potential TOCTOU race conditions

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <88dbfb85-571a-4f65-8879-16972dd87bbd@web.de>
Date: Tue, 20 Jan 2026 13:38:33 +0100
From: Markus Elfring <Markus.Elfring@....de>
To: Gui-Dong Han <hanguidong02@...il.com>, linux-media@...r.kernel.org
Cc: stable@...r.kernel.org, LKML <linux-kernel@...r.kernel.org>,
 Jia-Ju Bai <baijiaju1990@...il.com>, Hans Verkuil
 <hverkuil+cisco@...nel.org>, Mauro Carvalho Chehab <mchehab@...nel.org>
Subject: Re: [PATCH v2] media: dvb_demux: fix potential TOCTOU race conditions

…
> Fix this by extending the lock scope.
…

How do you think about to increase the application of scope-based resource management?
https://elixir.bootlin.com/linux/v6.19-rc5/source/include/linux/mutex.h#L253

> This possible bug was found by our experimental static analysis tool,
> which analyzes lock usage to detect TOCTOU issues.

* Do you refer to any other source code analysis approach than LR-Miner?

* Will any additional background information become more helpful here?

Regards,
Markus