From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754707AbdAaAsh (ORCPT ); Mon, 30 Jan 2017 19:48:37 -0500 Received: from casper.infradead.org ([85.118.1.10]:55092 "EHLO casper.infradead.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753161AbdAaAsg (ORCPT ); Mon, 30 Jan 2017 19:48:36 -0500 Date: Tue, 31 Jan 2017 00:48:29 +0000 (GMT) From: James Simmons To: Dan Carpenter cc: Liang Zhen , Amir Shehata , Greg Kroah-Hartman , devel@driverdev.osuosl.org, Andreas Dilger , Oleg Drokin , Linux Kernel Mailing List , Lustre Development List Subject: Re: [PATCH 60/60] staging: lustre: libcfs: fix minimum size check for libcfs ioctl In-Reply-To: <20170130105446.GA6970@mwanda> Message-ID: References: <1485648328-2141-1-git-send-email-jsimmons@infradead.org> <1485648328-2141-61-git-send-email-jsimmons@infradead.org> <20170130105156.GA6881@mwanda> <20170130105446.GA6970@mwanda> User-Agent: Alpine 2.20 (LFD 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20170131_004829_197420_5880C646 X-CRM114-Status: UNSURE ( 8.33 ) X-CRM114-Notice: Please train this message. X-Spam-Score: -1.9 (-) X-Spam-Report: SpamAssassin version 3.4.1 on casper.infradead.org summary: Content analysis details: (-1.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org > On Mon, Jan 30, 2017 at 01:51:56PM +0300, Dan Carpenter wrote: > > The lstcon_ioctl_entry() function doesn't have enough size checking. > > Actually, the lstcon_ioctl_entry() would have been fine before we apply > this [patch 60/60]... As near as I can tell, no in kernel code is > negatively affected by the bug this patch fixes. There is one, the ioctl IOC_LIBCFS_GET_LNET_STATS was affected by this bug. That is how it was founded.