Re: [LTP] fanotify25: Add CVE reference and include it in CVE runfile

[linuxtestproject.agent@gmail.com]

Hi Martin,

On Mon, Jul 13 2026, Martin Doucha wrote:
> fanotify25: Add CVE reference and include it in CVE runfile

> + * CVE-2023-52879
> + *
> + * Verify that :manpage:`fanotify(7)` monitoring can be applied to the tracing
> + * filesystem and write events will be correctly delivered. NULL pointer
> + * dereference fixed in:
> + *
> + * commit bb32500fb9b78215e4ef6ee8b4345c5f5d7eafb4
> + * Author: Steven Rostedt (Google) <rostedt@goodmis.org>
> + * Date:   Tue Oct 31 12:24:53 2023 -0400
> + *
> + * tracing: Have trace_event_file have ref counters

The Author: and Date: lines are commit metadata that do not help
describe what the test does or why it matters. The linux-git tag
already records the commit reference.

Other tests in the tree use a compact inline format, e.g. fanotify24.c:

  commit 28bba2c2935e2 ("fsnotify: Pass correct offset to
  fsnotify_mmap_perm()")

Would it be possible to drop the Author:/Date: lines and fold the
reference into the description as a single line, e.g.:

  NULL pointer dereference fixed in commit bb32500fb9b7
  ("tracing: Have trace_event_file have ref counters").

Verdict - Needs revision

---
Note:

The agent can sometimes produce false positives although often its
findings are genuine. If you find issues with the review, please
comment this email or ignore the suggestions.

Regards,
LTP AI Reviewer

-- 
Mailing list info: https://lists.linux.it/listinfo/ltp