Received: by 2002:a05:6a10:a841:0:0:0:0 with SMTP id d1csp1957800pxy; Sat, 24 Apr 2021 00:22:15 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwXLky4bVkUxjP5vhLWAxIu+O5pIG7oEleNeuGMJ47n7sPMWJP0RveBlGNXQiKAT/510QoK X-Received: by 2002:a17:90b:4504:: with SMTP id iu4mr8670565pjb.76.1619248935605; Sat, 24 Apr 2021 00:22:15 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1619248935; cv=none; d=google.com; s=arc-20160816; b=Sym1Tpaj8Bb0PvBdJ51sizrTFQHLjRClJMG7YKKIde4zXMNefSBmcG4OaLwcRPIaNh DRXY7j3hAcwI0xa/AgY8J22weCijVSR21t5T/mlv0TOhHQX1zsBn4GGYFxhjrfUCfPsP ikdVGdhP9rhcO8hfWnY7DY6vhFmzmBWkeEuJNexpqAAg3eBhRbgdPrD2mrsX7X3ns2CN jRZTH1MKzDfkhoBpfyXyD69e+sjlUUw95/MeXhqbguWk1wUGaz1R3mmPssTcLtBCT/S3 V6kVI03yw9shr84wRc9vQLQvhLNcvojCHoB9nZA5e/Z79p/YxRbttoTrbcPeo2c+VRd+ z8EQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=rmMlrAMNmA8J8h0mAbFrp/9eHvrt2b4INkflSo5OeFA=; b=walCxDk9piQwtAuS4UWErVyvFRHfF35z6HrCUEIl8YAhKEhbBBfMiXoimf+WmBDW/v X0f+bERUuHq+/kKMm3BKXS0fhuLiNfGSchY5HoH4d8BLHFC9zF9WC2ldJQ4zvA90GvbO r8YYXc/lv9aBNfRgUs6DsxlpJQROyYDmAiKRgluVjcqaQtSa/OqL8tWHJ5dGlyaGXRTv s5yqGZxb83p31ZsCYiFG7BUR4bJJNcS8jmuzNC00s2ggG2xZYBzT+CQK4pcV/hORXF9D VtD1rN0PXum/ayGoSfidAzmmLZ6GMuvnGHtDWihScmJsbt7i0pFnwUtAo4N9e2nsoV+1 8Lmw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b="T/mUlID+"; spf=pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-nfs-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id c11si10076738plo.70.2021.04.24.00.21.49; Sat, 24 Apr 2021 00:22:15 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b="T/mUlID+"; spf=pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-nfs-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231701AbhDXHWY (ORCPT + 99 others); Sat, 24 Apr 2021 03:22:24 -0400 Received: from mail.kernel.org ([198.145.29.99]:53750 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230471AbhDXHWX (ORCPT ); Sat, 24 Apr 2021 03:22:23 -0400 Received: by mail.kernel.org (Postfix) with ESMTPSA id 1B4D961404; Sat, 24 Apr 2021 07:21:44 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1619248905; bh=2IBg5lD3luughl/O28DyG4n7IZAasZN8SR4zzP9umVY=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=T/mUlID+VCER99XBM7rxiCQNaW22mN7Z9/USnqDT/ucOQZLn/mdh5SGMKbidSefPX Rf4JbhOcoL4tb9Re3uYHLlHl405t2+ACO38WozZiBdnghBgrlL0+knAQgOcgxQsow9 tKrQyhEpqsFPE55ZO7eFU2u5M8FBmeAv6eCj2qzbyLHVsBpyI05T96Xj2WOxWcnILH eOqQkNOcvW954sHM6pK6cOtV/meI6/tEy72I3zH2Tca4107mNyvoNBnO3TvezyJtzT Gr9GVMy8LvrUdClP+rFTp5os6X7AM7ND8Ah71hFsvMUCBWiz5zwBrakoHqqLBnQcmB mKEQSv/CNzfXA== Date: Sat, 24 Apr 2021 10:21:41 +0300 From: Leon Romanovsky To: "J. Bruce Fields" Cc: "Shelat, Abhi" , Greg KH , Sudip Mukherjee , Aditya Pakki , Chuck Lever , Trond Myklebust , Anna Schumaker , "David S. Miller" , Jakub Kicinski , Dave Wysochanski , "linux-nfs@vger.kernel.org" , netdev , linux-kernel Subject: Re: [PATCH] SUNRPC: Add a check for gss_release_msg Message-ID: References: <3B9A54F7-6A61-4A34-9EAC-95332709BAE7@northeastern.edu> <20210421133727.GA27929@fieldses.org> <20210421135637.GB27929@fieldses.org> <20210422193950.GA25415@fieldses.org> <20210423180727.GD10457@fieldses.org> <20210423214850.GI10457@fieldses.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20210423214850.GI10457@fieldses.org> Precedence: bulk List-ID: X-Mailing-List: linux-nfs@vger.kernel.org On Fri, Apr 23, 2021 at 05:48:50PM -0400, J. Bruce Fields wrote: > Have umn addresses been blocked from posting to kernel lists? It is very unlikely. > > Anyway: > > On Fri, Apr 23, 2021 at 10:29:52PM +0300, Leon Romanovsky wrote: > > On Fri, Apr 23, 2021 at 02:07:27PM -0400, J. Bruce Fields wrote: > > > On Fri, Apr 23, 2021 at 08:25:28PM +0300, Leon Romanovsky wrote: > > > > On Thu, Apr 22, 2021 at 03:39:50PM -0400, J. Bruce Fields wrote: > > > > > On Wed, Apr 21, 2021 at 09:56:37AM -0400, J. Bruce Fields wrote: > > > > > > On Wed, Apr 21, 2021 at 04:49:31PM +0300, Leon Romanovsky wrote: > > > > > > > If you want to see another accepted patch that is already part of > > > > > > > stable@, you are invited to take a look on this patch that has "built-in bug": > > > > > > > 8e949363f017 ("net: mlx5: Add a missing check on idr_find, free buf") > > > > > > > > > > > > Interesting, thanks. > > > > > > > > > > Though looking at it now, I'm not actually seeing the bug--probably I'm > > > > > overlooking something obvious. > > > > > > > > It was fixed in commit 31634bf5dcc4 ("net/mlx5: FPGA, tls, hold rcu read lock a bit longer") > > > > > > So is the "Fixes:" line on that commit wrong? It claims the bug was > > > introduced by an earlier commit, ab412e1dd7db ("net/mlx5: Accel, add TLS > > > rx offload routines"). > > > > Yes, I think that Fixes line is misleading. > > > > > > > > Looks like Aditya Pakki's commit may have widened the race a little, but > > > I find it a little hard to fault him for that. > > > > We can argue about severity of this bug, but the whole paper talks about > > introduction of UAF bugs unnoticed. > > Aditya Pakki points out in private mail that this patch is part of the > work described in this paper: > > https://www-users.cs.umn.edu/~kjlu/papers/crix.pdf > > (See the list of patches in the appendix.) > > I mean, sure, I suppose they could have created that whole second line > of research just as a cover to submit malicious patches, but I think > we're running pretty hard into Occam's Razor at that point. Let's not speculate here. The lack of trust, due to unethical research that was done by UMN researchers, amount of bugs already introduced by @umn, and multiple attempts to repeat the same pattern (see Al Viro responses on patches like this SUNRPC patch) is enough to stop waste our time. Thanks > > --b.