Twitter | Pretraživanje | |
Dmitry Vyukov
I have so many questions right now. You know , right, the thing that runs the universe today? This FOU_ATTR_LOCAL_V6 wanted to say .len instead of .type: This means this thing never-ever worked in any way. Any attempt to pass these args would...
Reply Retweet Označi sa "sviđa mi se" More
Dmitry Vyukov 21. sij
Odgovor korisniku/ci @dvyukov
...fail immediately. This means it was never invoked once, 0 tests. Can probably also corrupt memory and do other bad things. The file was touched several times after that, obviously no tests were run after these changes as well...
Reply Retweet Označi sa "sviđa mi se"
Dmitry Vyukov 21. sij
Odgovor korisniku/ci @davem_dokebi
This is public interface (analog of syscalls), adds public symbols, available to unpriv users, in 5.4 LTS release now. How?
Reply Retweet Označi sa "sviđa mi se"
Dmitry Vyukov 23. sij
this was found with static analysis (of elf files,easier to read policies there). Is there anything for netlink? That may be profitable (>500 policies in kernel) if you are looking for ideas (and out of bugs :)) Missed arg checks are common
Reply Retweet Označi sa "sviđa mi se"
Tolyan Botan 22. sij
Odgovor korisniku/ci @dvyukov @kristrev
is the author of the change.
Reply Retweet Označi sa "sviđa mi se"
Dmitry Vyukov 23. sij
Odgovor korisniku/ci @kristrev
just mailed a fix: (now need to revert removal of these attributes from syzkaller :))
Reply Retweet Označi sa "sviđa mi se"
Matthew Friday 21. sij
Odgovor korisniku/ci @dvyukov
The "realibility" does not really matter, all that matters is to get through code review and endup with the commit inside for logs... Same thing with all of these CVE Hunter fixes...
Reply Retweet Označi sa "sviđa mi se"
Jason Turner 21. sij
Odgovor korisniku/ci @dvyukov
Same for FOU_ATTR_PEER_V6 then also? Or no? This raises all kinds of questions for me about the related _V4 versions also.
Reply Retweet Označi sa "sviđa mi se"
Tolyan Botan 22. sij
Odgovor korisniku/ci @dvyukov
The change was introduced in the commit on 27 Mar 2019 release 5.2
Reply Retweet Označi sa "sviđa mi se"