Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757489Ab1EYOwt (ORCPT ); Wed, 25 May 2011 10:52:49 -0400 Received: from adelie.canonical.com ([91.189.90.139]:35681 "EHLO adelie.canonical.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753414Ab1EYOws (ORCPT ); Wed, 25 May 2011 10:52:48 -0400 Date: Wed, 25 May 2011 09:52:45 -0500 From: Serge Hallyn To: Robert =?utf-8?B?xZp3acSZY2tp?= Cc: Eugene Teo , linux-kernel@vger.kernel.org, security@kernel.org, kees@ubuntu.com, Tavis Ormandy , David Howells Subject: Re: [Security] Fwd: Oops (bad memory deref) in slab_alloc() due to filp_cachep holding incorrect values Message-ID: <20110525145245.GA17600@mail.hallyn.com> References: <20110525144400.GA26206@mail.hallyn.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20110525144400.GA26206@mail.hallyn.com> User-Agent: Mutt/1.5.21 (2010-09-15) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 596 Lines: 16 Quoting Serge Hallyn (serge.hallyn@canonical.com): > Fooi, it looks like all users of cred_alloc_blank() may need to be > audited wrt commit 47a150edc2ae734c0f4bf50aa19499e23b9a46f8. Fortunately there appear to be no other users. David, is there any other place that a cred gets created and used without it coming from copy_creds()? thanks, -serge -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/