netdev - Re: NULL pointer deref, selinux_socket_unix_may

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3405435.XFBqjMtCVW@sifl>
Date:	Fri, 22 Mar 2013 12:24:38 -0400
From:	Paul Moore <paul@...l-moore.com>
To:	Ján Stanček <jan.stancek@...il.com>
Cc:	netdev@...r.kernel.org, eparis@...hat.com, sds@...ho.nsa.gov
Subject: Re: NULL pointer deref, selinux_socket_unix_may_send+0x34/0x90

On Friday, March 22, 2013 04:48:32 PM Ján Stanček wrote:
> Hi Paul,
> 
> thanks for reply, I'll try your patch and let you know.

Great, thanks.

> I'm not certain about cause either, but patch I sent in last email
> makes it go away, so maybe that can help in some way.

At the very least you've found a way to reproduce the problem and your patch 
furthers my belief that we've got a race condition somewhere - all very 
helpful!  It may also turn out that your patch is the "right" solution, I'd 
just like to better understand why we are seeing the race in the first place.

> I made a v2 of the reproducer (attached), which triggers the issue a lot
> faster on 2 systems I tried (32 CPU and 4 CPU systems) - just in couple of
> seconds.

Excellent, while I don't have a 32 cpu system handy, I do have a 4 cpu system 
that I can play with.  Thanks again.

-Paul

-- 
paul moore
www.paul-moore.com

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html