Thread (13 messages) 13 messages, 5 authors, 2008-10-01

Re: [PATCH 3/4] ext2: Avoid printk floods in the face of directory corruption

From: Andrew Morton <akpm@linux-foundation.org>
Date: 2008-09-17 19:26:59
Also in: lkml

On Sat, 13 Sep 2008 11:32:50 -0400
"Theodore Ts'o" [off-list ref] wrote:
From: "Theodore Ts'o" <tytso@MIT.EDU>
To: akpm@linux-foundation.org
Cc: linux-kernel@vger.kernel.org, "Theodore Ts'o" <tytso@MIT.EDU>, Eric Sandeen <redacted>, linux-ext4@vger.kernel.org, Eugene Teo <redacted>
Subject: [PATCH 3/4] ext2: Avoid printk floods in the face of directory corruption
Date: Sat, 13 Sep 2008 11:32:50 -0400
X-Mailer: git-send-email 1.5.6.1.205.ge2c7.dirty

Note: some people thinks this represents a security bug, since it
might make the system go away while it is printing a large number of
console messages, especially if a serial console is involved.  Hence,
it has been assigned CVE-2008-3528, but it requires that the attacker
either has physical access to your machine to insert a USB disk with a
corrupted filesystem image (at which point why not just hit the power
button), or is otherwise able to convince the system administrator to
mount an arbitrary filesystem image (at which point why not just
include a setuid shell or world-writable hard disk device file or some
such).  Me, I think they're just being silly.

Signed-off-by: Eric Sandeen <redacted>
Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
Cc: linux-ext4@vger.kernel.org
Cc: Eugene Teo <redacted>
This patch was purportedly authored by yourself, but I'm going to
assume that it was authored by Eric.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help