* [RFC v5.10 0/3] mac80211 use-after-free fix
@ 2022-10-14 16:39 Johannes Berg
2022-10-14 16:56 ` Johannes Berg
0 siblings, 1 reply; 5+ messages in thread
From: Johannes Berg @ 2022-10-14 16:39 UTC (permalink / raw)
To: linux-wireless, stable
Cc: Felix Fietkau, Thadeu Lima de Souza Cascardo, Marcus Meissner,
Jiri Kosina
Hi,
So I looked at this, and it wasn't great one way or the other...
The first patch here is obvious, let's just take it and get one
of the parsings out of the way.
The second one removes a couple of more cases where this is done,
since it only happens when the last argument is non-NULL.
The third then is to avoid the UAF, and is simpler now since only
a few places can even allocate it.
johannes
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [RFC v5.10 0/3] mac80211 use-after-free fix
2022-10-14 16:39 [RFC v5.10 0/3] mac80211 use-after-free fix Johannes Berg
@ 2022-10-14 16:56 ` Johannes Berg
2022-10-14 17:41 ` Greg KH
0 siblings, 1 reply; 5+ messages in thread
From: Johannes Berg @ 2022-10-14 16:56 UTC (permalink / raw)
To: linux-wireless, stable
Cc: Felix Fietkau, Thadeu Lima de Souza Cascardo, Marcus Meissner,
Jiri Kosina
Sorry about the duplicate, I'm on a train to Berlin and network was
spotty.
johannes
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [RFC v5.10 0/3] mac80211 use-after-free fix
2022-10-14 16:56 ` Johannes Berg
@ 2022-10-14 17:41 ` Greg KH
2022-10-15 15:30 ` Greg KH
0 siblings, 1 reply; 5+ messages in thread
From: Greg KH @ 2022-10-14 17:41 UTC (permalink / raw)
To: Johannes Berg
Cc: linux-wireless, stable, Felix Fietkau,
Thadeu Lima de Souza Cascardo, Marcus Meissner, Jiri Kosina
On Fri, Oct 14, 2022 at 06:56:44PM +0200, Johannes Berg wrote:
> Sorry about the duplicate, I'm on a train to Berlin and network was
> spotty.
No worries! I'll do a round of stable updates with what we have right
now tomorrow morning and then will look at these when I return home
later tomorrow evening. Thanks for doing them!
greg k-h
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [RFC v5.10 0/3] mac80211 use-after-free fix
2022-10-14 17:41 ` Greg KH
@ 2022-10-15 15:30 ` Greg KH
0 siblings, 0 replies; 5+ messages in thread
From: Greg KH @ 2022-10-15 15:30 UTC (permalink / raw)
To: Johannes Berg
Cc: linux-wireless, stable, Felix Fietkau,
Thadeu Lima de Souza Cascardo, Marcus Meissner, Jiri Kosina
On Fri, Oct 14, 2022 at 07:41:18PM +0200, Greg KH wrote:
> On Fri, Oct 14, 2022 at 06:56:44PM +0200, Johannes Berg wrote:
> > Sorry about the duplicate, I'm on a train to Berlin and network was
> > spotty.
>
> No worries! I'll do a round of stable updates with what we have right
> now tomorrow morning and then will look at these when I return home
> later tomorrow evening. Thanks for doing them!
They look sane, thanks, all now queued up!
greg k-h
^ permalink raw reply [flat|nested] 5+ messages in thread
* [RFC v5.10 0/3] mac80211 use-after-free fix
@ 2022-10-14 16:41 Johannes Berg
0 siblings, 0 replies; 5+ messages in thread
From: Johannes Berg @ 2022-10-14 16:41 UTC (permalink / raw)
To: linux-wireless, stable
Cc: Felix Fietkau, Thadeu Lima de Souza Cascardo, Marcus Meissner,
Jiri Kosina
Hi,
So I looked at this, and it wasn't great one way or the other...
The first patch here is obvious, let's just take it and get one
of the parsings out of the way.
The second one removes a couple of more cases where this is done,
since it only happens when the last argument is non-NULL.
The third then is to avoid the UAF, and is simpler now since only
a few places can even allocate it.
johannes
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2022-10-15 15:29 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2022-10-14 16:39 [RFC v5.10 0/3] mac80211 use-after-free fix Johannes Berg
2022-10-14 16:56 ` Johannes Berg
2022-10-14 17:41 ` Greg KH
2022-10-15 15:30 ` Greg KH
-- strict thread matches above, loose matches on Subject: below --
2022-10-14 16:41 Johannes Berg
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox