netdev - Re: [patch] Fix handling of overlength pathname in AF_UNIX sun

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20120419111909.616bef70@pyramind.ukuu.org.uk>
Date:	Thu, 19 Apr 2012 11:19:09 +0100
From:	Alan Cox <alan@...rguk.ukuu.org.uk>
To:	mtk.manpages@...il.com
Cc:	David Miller <davem@...emloft.net>, carlos@...temhalted.org,
	netdev@...r.kernel.org, penguin-kernel@...ove.sakura.ne.jp,
	linux-api@...r.kernel.org, yoshfuji@...ux-ipv6.org,
	jengelh@...ozas.de, w@....eu
Subject: Re: [patch] Fix handling of overlength pathname in AF_UNIX sun_path

> 3. Considering these two sets:
> 
>   (a) [applications that rely on the assumption that there
>        is a null terminator inside sizeof(sun_path) bytes]
>   (b) [applications that would break if the kernel behavior changed]
> 
>   I suspect that set (a) is rather larger than set (b)--or, more
>   likely still, applications ensure they go for the lowest common
>   denominator limit of 92 (HP-UX) or 104 (historical BSD limit)
>   bytes, and so avoid this issue completely.

Or another way of putting it

3(a)	Sloppy coding that may have lots of other bugs

3(b)	Interfaces and code we promised not to break.



Alan
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html