[lkml]   [2012]   [Jun]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
Subject[PATCH 0/3] eCryptfs: Fix and simplify messaging code
Sasha Levin discovered a bug when fuzzing /dev/ecryptfs. The code behind
/dev/ecryptfs never considered the possibility that file descriptors may be
inherited or passed to other processes. Additionally, far too many BUG() calls
were used throughout the messaging code.

The eCryptfs messaging code was originally implemented using netlink. Several
years ago, it was converted to a miscdev driver but it retained some of the
concepts that were specific to netlink.

The first patch is a minimalist approach at solving the bug Sasha discovered.
The second patch removes some cruft. The last patch leverages the file-based
miscdev approach to simplify the implementation.



fs/ecryptfs/ecryptfs_kernel.h | 22 ++-----
fs/ecryptfs/messaging.c | 136 +++++------------------------------------
fs/ecryptfs/miscdev.c | 91 ++++++++-------------------
3 files changed, 48 insertions(+), 201 deletions(-)

 \ /
  Last update: 2012-06-13 02:41    [W:0.073 / U:0.552 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site