From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <stable-owner@vger.kernel.org>
Received: from mail.kernel.org ([198.145.29.99]:58088 "EHLO mail.kernel.org"
        rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP
        id S1730688AbeLPT1F (ORCPT <rfc822;stable@vger.kernel.org>);
        Sun, 16 Dec 2018 14:27:05 -0500
Date: Sun, 16 Dec 2018 14:27:02 -0500
From: Steven Rostedt <rostedt@goodmis.org>
To: Greg KH <gregkh@linuxfoundation.org>
Cc: Loic <hackurx@opensec.fr>, stable@vger.kernel.org,
        ameyt@codeaurora.org, amit.pundir@linaro.org
Subject: Re: [PATCH] tracing: Use strlcpy() instead of strcpy() in
 __trace_find_cmdline()
Message-ID: <20181216142702.09ed540b@vmware.local.home>
In-Reply-To: <20181216085233.GC29097@kroah.com>
References: <20181215182537.e0f95a3bb791e4f68f23eac8@opensec.fr>
        <20181216085233.GC29097@kroah.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: stable-owner@vger.kernel.org
List-ID: <stable.vger.kernel.org>

On Sun, 16 Dec 2018 09:52:33 +0100
Greg KH <gregkh@linuxfoundation.org> wrote:

> On Sat, Dec 15, 2018 at 06:25:37PM +0100, Loic wrote:
> > Hello,
> > 
> > Please picked up this patch for linux 4.4 and 4.9.
> > This fixes CVE-2017-0605 (Rejected?). Tested in Debian ;)  
> 
> It was rejected as a CVE for a good reason, and that reason is also why
> I refused to add it to the stable kernel releases.  In short, this is
> not an issue or bug at all, there is nothing wrong with the existing
> code.
>

I'm starting to regret that I ever accepted the original patch :-(

-- Steve