lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <dae4c5c8-38a2-9134-c8bb-604537f94f6d@datenfreihafen.org>
Date:   Thu, 2 Mar 2023 14:47:07 +0100
From:   Stefan Schmidt <stefan@...enfreihafen.org>
To:     Paolo Abeni <pabeni@...hat.com>,
        Miquel Raynal <miquel.raynal@...tlin.com>,
        "David S. Miller" <davem@...emloft.net>,
        Jakub Kicinski <kuba@...nel.org>,
        Eric Dumazet <edumazet@...gle.com>, netdev@...r.kernel.org
Cc:     Alexander Aring <alex.aring@...il.com>, linux-wpan@...r.kernel.org,
        David Girault <david.girault@...vo.com>,
        Romuald Despres <romuald.despres@...vo.com>,
        Frederic Blain <frederic.blain@...vo.com>,
        Nicolas Schodet <nico@...fr.eu.org>,
        Guilhem Imberton <guilhem.imberton@...vo.com>,
        Thomas Petazzoni <thomas.petazzoni@...tlin.com>,
        Sanan Hasanov <sanan.hasanov@...ghts.ucf.edu>
Subject: Re: [PATCH net] ieee802154: Prevent user from crashing the host

Hello Paolo.

On 02.03.23 11:20, Paolo Abeni wrote:
> Hello,
> 
> On Thu, 2023-03-02 at 09:48 +0100, Miquel Raynal wrote:
>> miquel.raynal@...tlin.com wrote on Wed,  1 Mar 2023 16:44:50 +0100:
>>
>>> Avoid crashing the machine by checking
>>> info->attrs[NL802154_ATTR_SCAN_TYPE] presence before de-referencing it,
>>> which was the primary intend of the blamed patch.
>>
>> Subject should have been wpan instead of net, sorry for the confusion.
> 
> I read the above as you intend this patch to go through
> Alexander/Stefan tree, thus dropping from netdev PW.

That is correct. I just applied it and will send a pull request for net 
later today once it passed all my tests here.

regards
Stefan Schmidt

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ