From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.2 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id E8FDDC43460 for ; Wed, 28 Apr 2021 06:17:11 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id C1D87608FE for ; Wed, 28 Apr 2021 06:17:11 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S235869AbhD1GRy (ORCPT ); Wed, 28 Apr 2021 02:17:54 -0400 Received: from verein.lst.de ([213.95.11.211]:47975 "EHLO verein.lst.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229464AbhD1GRx (ORCPT ); Wed, 28 Apr 2021 02:17:53 -0400 Received: by verein.lst.de (Postfix, from userid 2407) id 7252F68B05; Wed, 28 Apr 2021 08:17:06 +0200 (CEST) Date: Wed, 28 Apr 2021 08:17:06 +0200 From: Christoph Hellwig To: Linus Torvalds Cc: Christoph Hellwig , "Darrick J. Wong" , Jia He , Al Viro , linux-fsdevel , linux-xfs , Dave Chinner , Linux Kernel Mailing List , Eric Sandeen Subject: Re: [GIT PULL] iomap: new code for 5.13-rc1 Message-ID: <20210428061706.GC5084@lst.de> References: <20210427025805.GD3122264@magnolia> <20210427195727.GA9661@lst.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.17 (2007-11-01) Precedence: bulk List-ID: X-Mailing-List: linux-fsdevel@vger.kernel.org On Tue, Apr 27, 2021 at 01:05:13PM -0700, Linus Torvalds wrote: > So how many _would_ be enough? IOW, what would make %pD work better > for this case? Preferably all. > Why are the xfstest messages so magically different from real cases > that they'd need to be separately distinguished, and that can't be > done with just the final path component? > > If you think the message is somehow unique and the path is something > secure and identifiable, you're very confused. file_path() is in no > way more "secure" than using %pD4 would be, since if there's some > actual bad actor they can put newlines etc in the pathname, they can > do chroot() etc to make the path look anything they like. Nothing needs to be secure. It just needs to not scare users because they can see that the first usually two components clearly identify this is the test file system.