Received: by 2002:a05:6a10:1a4d:0:0:0:0 with SMTP id nk13csp159521pxb; Mon, 31 Jan 2022 18:11:27 -0800 (PST) X-Google-Smtp-Source: ABdhPJwKoPKLeFYkyaompo8agq1yyuvHr+ysTFcqwujK8o0guABdHr5kWw1Fr3sdG3+lzaZbrKp6 X-Received: by 2002:a17:906:d283:: with SMTP id ay3mr18897927ejb.249.1643681486981; Mon, 31 Jan 2022 18:11:26 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1643681486; cv=none; d=google.com; s=arc-20160816; b=gHxEOCNlfc5iR86+uvNauUFvWV8ZHnH17bcLsGJHrqzXPvWL8lHLeYtFgCV1iBQ8X4 zlkiATSoyAlHBOoUh6IaQCRlNO+5aX62Q2Nzj54etEMk//f64D5KVnBiJ8rm3o5Gkjx2 Bvmg/c1ivWT5OGlXyc41GDljljzeCvFheLW0l1KK/I6WXh8wVr4HEwDMWjsqqvFXR3ID SZpgHqhmgvdbZrFbYczw+F8sCc3G9XcZG8DZcUTXjtaDxc1Rl6cmEFd9RkSjkw5yf9b+ K71I2Jox7VDwFTvH/UpAIdkdXtr7Ic4zYIKujKy7C0gAN4S5NYiGwS6V1Wa+yEWgyBhY 04VA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=zSca3FGDjsidzaVdoyTtve4DPBTzftkqSFrXg4loIjM=; b=pxR0HZEgQv57O24/0MPt9n0HK5velMTPiI4fWZq4XxA+gQKQwlJfvTytxZzYXqMxS4 3dovyRmRzj11CdflW430FRL/DKUWSohWrKFgoruBLdCXnfN469mxI5FUM7pZK5nHpyi+ h7KaO3T7h81+EN9ZDStEZdbCuK8TjUFqjY4cs9nk6AwIujYiZUaCo2CG8gb/N0TqKdYe dbWht+KJa+fs7XZbh+l+FJWNZHl96usAeL4bjk1pZ5ujuEkZKTXI4NHdajYzNkEFzVTY a+TfMcQBT+4XZERydJlfEbRX/cpwjc+dKZySHGcPJ/dBsySFrXqtque3GCEgTPjiqAtD 3OmQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@linuxfoundation.org header.s=korg header.b=c71n5dgd; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linuxfoundation.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id eb8si8757134edb.481.2022.01.31.18.11.02; Mon, 31 Jan 2022 18:11:26 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@linuxfoundation.org header.s=korg header.b=c71n5dgd; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linuxfoundation.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S238021AbiA2OrS (ORCPT + 99 others); Sat, 29 Jan 2022 09:47:18 -0500 Received: from dfw.source.kernel.org ([139.178.84.217]:38814 "EHLO dfw.source.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230431AbiA2OrR (ORCPT ); Sat, 29 Jan 2022 09:47:17 -0500 Received: from smtp.kernel.org (relay.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dfw.source.kernel.org (Postfix) with ESMTPS id AAC6360E0A for ; Sat, 29 Jan 2022 14:47:16 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id 7AFEEC340E5; Sat, 29 Jan 2022 14:47:15 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1643467636; bh=Zd8QO1OjYu/hqF3QMj1BM4GaGYurq0BPUV28vt7DEqQ=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=c71n5dgdTLW0ajX91qrGzlQjlP3TcPkoVQEdOFO+LD1K93szKSQoM8c/20G3CJjRn dq5NqIrM24Y2bsr7Zcd/rqi5Wdv+ZpBRjWb/+mloPZdH7E24kX7dhTTtrP46b5Vu9B 9cLiJwonhOnOwZu7G0014AGme/kGcsBHpRBuedvg= Date: Sat, 29 Jan 2022 15:47:13 +0100 From: Greg KH To: Kangjie Lu Cc: Karol Herbst , Alex Deucher , Lyude Paul , Zhou Qingyang , David Airlie , nouveau , LKML , Maling list - DRI developers , Ben Skeggs Subject: Re: [PATCH] drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() Message-ID: References: <20220124165856.57022-1-zhou1615@umn.edu> <536c833413ccbe0b8ad653a50c5ea867bf975290.camel@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, Jan 29, 2022 at 08:18:55AM -0600, Kangjie Lu wrote: > On Fri, Jan 28, 2022 at 1:58 PM Karol Herbst wrote: > > > > On Fri, Jan 28, 2022 at 8:54 PM Alex Deucher wrote: > > > > > > On Fri, Jan 28, 2022 at 2:20 PM Lyude Paul wrote: > > > > > > > > Sigh-thank you for catching this - I had totally forgot about the umn.edu ban. > > > > I pushed this already but I will go ahead and send a revert for this patch. > > > > Will cc you on it as well. > > > > > > This seems short-sighted. If the patch is valid I see no reason to > > > not accept it. I'm not trying to downplay the mess umn got into, but > > > as long as the patch is well scrutinized and fixes a valid issue, it > > > should be applied rather than leaving potential bugs in place. > > > > > > Alex > > > > > > > Even though knowing that malicious code can be introduced via > > perfectly fine looking patches, and sometimes one will never spot the > > problem, this patch isn't all that bad tbh. > > > > So should we reject patches out of "policies" or should we just be > > extra careful? But not addressing the concerns as Greg pointed out is > > also kind of a bad move, but also not knowing what the state of > > resolving this mess is anyway. > > > Seeing some discussion here, I feel I owe you some quick updates on > the state. We sent three testing patches in August 2020, which is a > serious mistake. We never did that again and will never do that again. > All other patches including recent ones were sent to fix real bugs, > not to introduce problems. Clearly, although most of the patches are > valid, some patches are still not good enough, but it is not about > malice. Fixing bugs in Linux isn't an easy task and takes so much > effort. > > We did not ignore the concerns pointed out by Greg, and have seriously > taken some actions. For example, we explained how our static-analysis > tool found the bugs, and members in my research group have internally > cross-reviewed the found bugs. We sent these patches after contacting > Greg---I thought Greg allowed us to send patches, but also requested > us to work on the last process with our administration. I do not recall saying anything like this at all. On January 4, I wrote to you and your coworkers on the mailing list message https://lore.kernel.org/r/YdQfCGf8qr5zZJef@kroah.com by saying: Note that your university is still in many kernel maintainer's ignore-list (myself included, I dug this up as I saw Fei's response.) Please work with your administration and the process that is currently happening in order to give you all the needed training so you will not keep causing these types of basic errors that keep your patches from being accepted. *plonk* And then later in a private email to you on January 5 where you emailed Kees and me to try to see if you were allowed to start sending patches again, I said: A kernel developer with lots of experience has already offered to work with your university. Hopefully that process has already started, if not, I suggest contacting your administration as they should know who this is. and then I closed with: Right now you all are still on my "ignore email" lists for patches. The patches recently submitted have been shown to be incomplete and in some places, completely wrong. I have contacted your administration about this issue because they asked to know if there were any problems in the future at our last discussion. In that response today, I wrote: I know that incompetence can often times be hard to distinguish from malice, but given the track-record here, we are now going to have to treat this as malice. If it is just incompetence, well, that's something that your organization needs to overcome. Either way, this is not something that the Linux kernel community should be forced to endure. So to be explicit, so you do not misunderstand me somehow: No more patches from umn.edu should be accepted into the Linux kernel until further public notice. They should be considered a "bad actor" given their prior history of submissions and lack of complying with the kernel community's prior requirements to them. Is this understood? greg k-h