Mail Archive Search: <+subject:/^(?:^\s*(re|sv|fwd|fw)[\[\]\d]*[:>-]+\s*)*\[PATCH\s+3\/5\]\s+net\/netfilter\/ipvs\/ip_vs_ctl\.c\:\s+drop\s+argument\s+range\s+check\s+just\s+before\s+the\s+check\s+for\s+equality\s*$/>

Results:

References: [ +subject:/^(?:^\s*(re|sv|fwd|fw)[\[\]\d]*[:>-]+\s*)*\[PATCH\s+3\/5\]\s+net\/netfilter\/ipvs\/ip_vs_ctl\.c\:\s+drop\s+argument\s+range\s+check\s+just\s+before\s+the\s+check\s+for\s+equality\s*$/: 9 ]

Total 9 documents matching your query.

1. Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality (score: 1): Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>; Date: Tue, 22 Jul 2014 12:14:41 +0300; If you have namespaces enabled then it's not *that* privaleged. regards, dan carpenter -- To unsubscribe from this list: send the line "unsubscribe lvs-devel" in the body of a message to majordomo@xx; /html/lvs-devel/2014-07/msg00025.html (12,586 bytes)
2. Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality (score: 1): Author: Julian Anastasov <ja@xxxxxx>; Date: Tue, 22 Jul 2014 11:52:02 +0300 (EEST); Hello, I'll change it to >= 256, to catch that we can not hold such big size in unsigned char [gs]et_arglen and also as an indication that we have to use allocated buffer instead of stack. For now bo; /html/lvs-devel/2014-07/msg00024.html (13,506 bytes)
3. Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality (score: 1): Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>; Date: Tue, 22 Jul 2014 10:42:14 +0300; 256 is off-by-one because u8 ranges from 0-255 so we are never able to copy 256 bytes into the "arg" buffer. Don't let users flood dmesg. Just return an error. (This can be triggered by non-root as w; /html/lvs-devel/2014-07/msg00023.html (12,205 bytes)
4. Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality (score: 1): Author: Julian Anastasov <ja@xxxxxx>; Date: Mon, 21 Jul 2014 23:01:56 +0300 (EEST); Hello, I prefer this to be fixed once and for all. Here is my attempt, it appears to work. I use union to get the max size to use for stack space. checkpatch.pl is noisy... Let me know if you have a; /html/lvs-devel/2014-07/msg00020.html (19,709 bytes)
5. Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality (score: 1): Author: Andrey Utkin <andrey.krieger.utkin@xxxxxxxxx>; Date: Sun, 20 Jul 2014 02:03:21 +0300; 2014-07-20 1:59 GMT+03:00 Andrey Utkin <andrey.krieger.utkin@xxxxxxxxx>: What about adding equivalent BUG_ON() statement to __init ip_vs_register_nl_ioctl(), which "registers" do_ip_vs_set_ctl() call; /html/lvs-devel/2014-07/msg00019.html (11,130 bytes)
6. Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality (score: 1): Author: Andrey Utkin <andrey.krieger.utkin@xxxxxxxxx>; Date: Sun, 20 Jul 2014 01:59:31 +0300; 2014-07-19 0:06 GMT+03:00 Andrey Utkin <andrey.krieger.utkin@xxxxxxxxx>: This approach doesn't work, looks because sizeof() values are not calculated at preprocessing stage. -- Andrey Utkin -- To uns; /html/lvs-devel/2014-07/msg00018.html (11,756 bytes)
7. Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality (score: 1): Author: Andrey Utkin <andrey.krieger.utkin@xxxxxxxxx>; Date: Sat, 19 Jul 2014 00:06:28 +0300; 2014-07-18 23:48 GMT+03:00 Julian Anastasov <ja@xxxxxx>: Thanks for info. What about static check at compilation time? -- Andrey Utkin -- To unsubscribe from this list: send the line "unsubscribe lvs; /html/lvs-devel/2014-07/msg00017.html (10,807 bytes)
8. Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality (score: 1): Author: Julian Anastasov <ja@xxxxxx>; Date: Fri, 18 Jul 2014 23:48:07 +0300 (EEST); Hello, The above check ensures the set_arglen[] value (some struct size) does not exceed the arg[MAX_ARG_LEN] space. You can check commit 04bcef2a83f40c ("ipvs: Add boundary check on ioctl arguments"; /html/lvs-devel/2014-07/msg00016.html (11,383 bytes)
9. [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality (score: 1): Author: Andrey Utkin <andrey.krieger.utkin@xxxxxxxxx>; Date: Fri, 18 Jul 2014 18:33:58 +0300; Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=80601 Reported-by: David Binderman <dcb314@xxxxxxxxxxx> Signed-off-by: Andrey Utkin <andrey.krieger.utkin@xxxxxxxxx> -- net/netfilter/ipvs/ip_vs_; /html/lvs-devel/2014-07/msg00015.html (10,405 bytes)

Current List: 1 - 9
Page: [1]