From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <stable-owner@vger.kernel.org>
Received: from mail.kernel.org ([198.145.29.99]:38124 "EHLO mail.kernel.org"
        rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP
        id S1729758AbeLPIwh (ORCPT <rfc822;stable@vger.kernel.org>);
        Sun, 16 Dec 2018 03:52:37 -0500
Date: Sun, 16 Dec 2018 09:52:33 +0100
From: Greg KH <gregkh@linuxfoundation.org>
To: Loic <hackurx@opensec.fr>
Cc: stable@vger.kernel.org, ameyt@codeaurora.org,
        amit.pundir@linaro.org, rostedt@goodmis.org
Subject: Re: [PATCH] tracing: Use strlcpy() instead of strcpy() in
 __trace_find_cmdline()
Message-ID: <20181216085233.GC29097@kroah.com>
References: <20181215182537.e0f95a3bb791e4f68f23eac8@opensec.fr>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20181215182537.e0f95a3bb791e4f68f23eac8@opensec.fr>
Sender: stable-owner@vger.kernel.org
List-ID: <stable.vger.kernel.org>

On Sat, Dec 15, 2018 at 06:25:37PM +0100, Loic wrote:
> Hello,
> 
> Please picked up this patch for linux 4.4 and 4.9.
> This fixes CVE-2017-0605 (Rejected?). Tested in Debian ;)

It was rejected as a CVE for a good reason, and that reason is also why
I refused to add it to the stable kernel releases.  In short, this is
not an issue or bug at all, there is nothing wrong with the existing
code.

thanks,

greg k-h