[lkml]   [2012]   [Jun]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    Subject[PATCH 0/3] eCryptfs: Fix and simplify messaging code
    Sasha Levin discovered a bug when fuzzing /dev/ecryptfs. The code behind
    /dev/ecryptfs never considered the possibility that file descriptors may be
    inherited or passed to other processes. Additionally, far too many BUG() calls
    were used throughout the messaging code.

    The eCryptfs messaging code was originally implemented using netlink. Several
    years ago, it was converted to a miscdev driver but it retained some of the
    concepts that were specific to netlink.

    The first patch is a minimalist approach at solving the bug Sasha discovered.
    The second patch removes some cruft. The last patch leverages the file-based
    miscdev approach to simplify the implementation.



    fs/ecryptfs/ecryptfs_kernel.h | 22 ++-----
    fs/ecryptfs/messaging.c | 136 +++++------------------------------------
    fs/ecryptfs/miscdev.c | 91 ++++++++-------------------
    3 files changed, 48 insertions(+), 201 deletions(-)

     \ /
      Last update: 2012-06-13 02:41    [W:0.033 / U:8.412 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site