lkml.org 
[lkml]   [2013]   [Jun]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    Subject[PATCH 0/8] format string usage clean ups
    Date
    Hello,

    This series is a result of an audit of format string uses in the
    kernel. Of two exploitable flaws, the first fix is now in the wireless
    tree:

    http://git.kernel.org/cgit/linux/kernel/git/linville/wireless.git/commit/?id=9538cbaab6e8b8046039b4b2eb6c9d614dc782bd

    The second fix is here as patch 1 ("block: do not pass disk names as format strings"). All the rest are either interface clean ups or
    preventative measures to avoid accidents in the future.

    There is still more needed before we can do something like this in
    the Makefile:

    +# Enable format-security when it can stop the build, otherwise disable.
    +KBUILD_CFLAGS += $(call cc-option,\
    + -Wformat -Wformat-security -Werror=format-security,\
    + -Wno-format-security)

    but I think this series covers the majority of potentially sensitive
    exposed infrastructure.

    Thanks,

    -Kees



    \
     
     \ /
      Last update: 2013-06-06 23:21    [W:2.651 / U:0.480 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site