Re: [PATCH] Fix CAN info leak/minor heap overflow

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
From: Oliver Hartkopp
Date: Tuesday, November 9, 2010 - 11:52 pm

On 09.11.2010 18:05, David Miller wrote:

I admit that from my todays knowledge i would have done things differently.
But the network layer information bits have been always exposed in /proc/net
as it was in 2003 when we started the implementation on a 2.4.x kernel.
There are netdriver infos in sysfs but no netlayer entries.

From my point of view the only thing could be to improve the current
situation, which the posted patch does:

- remove kernel addresses that were only relevant at implementation time
- allow AF_CAN protocols to provide their own information due to their needs
- provide inode numbers that can be found in procfs at several places
  => improvements for developers in userspace & kernelspace

The patch has been discussed on SocketCAN ML and the filter entries have not
been identified as a problem for userspace tools. E.g. /proc/net/can/stats is
one of the entries that's used by userspace tools.

IMHO the patch improves the historic situation and fixes the useless leakage
of kernel addresses. Please consider to apply that procfs changes.

Best regards,
Oliver
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
[SECURITY] CAN info leak/minor heap overflow, Dan Rosenberg, (Tue Nov 2, 11:28 am)
Re: [SECURITY] CAN info leak/minor heap overflow, Oliver Hartkopp, (Tue Nov 2, 12:43 pm)
Re: [SECURITY] CAN info leak/minor heap overflow, Dan Rosenberg, (Tue Nov 2, 12:53 pm)
Re: [SECURITY] CAN info leak/minor heap overflow, Oliver Hartkopp, (Tue Nov 2, 1:16 pm)
[PATCH] Fix CAN info leak/minor heap overflow, Urs Thuermann, (Fri Nov 5, 11:33 am)
Re: [PATCH] Fix CAN info leak/minor heap overflow, Oliver Hartkopp, (Tue Nov 9, 12:52 am)
Re: [PATCH] Fix CAN info leak/minor heap overflow, David Miller, (Tue Nov 9, 10:05 am)
Re: [PATCH] Fix CAN info leak/minor heap overflow, Oliver Hartkopp, (Tue Nov 9, 11:52 pm)
Re: [PATCH] Fix CAN info leak/minor heap overflow, David Miller, (Wed Nov 10, 10:51 am)
Re: [PATCH] Fix CAN info leak/minor heap overflow, Oliver Hartkopp, (Wed Nov 10, 3:10 pm)