Messages in this thread | | | Date | Mon, 19 Nov 2012 12:27:53 +0530 (IST) | From | P J P <> | Subject | Re: [PATCH] exec: do not leave bprm->interp on stack |
| |
+-- On Sun, 18 Nov 2012, Kees Cook wrote --+ | This is the second problem. I view this as less critical because it's only | 64 instead of 4, but it certainly should be solved as well.
I don't mean to be rude, but the patch I had sent solves both of these problems with much less performance hit.
Please see -> https://lkml.org/lkml/2012/10/26/442
Worst case: instead of 2^6(64) recursions, it would make only 4 calls to request_module() function. find_module() does not resolve module aliases, it could be removed from the above patch.
Please pardon me if I came across rude or offensive, I'm only trying to make a case. -- Prasad J Pandit / Red Hat Security Response Team DB7A 84C5 D3F9 7CD1 B5EB C939 D048 7860 3655 602B
| |