Bug#280492: kernel-source-2.4.27: strncpy does not 0-pad destination on some archs)
reassign 280492 kernel-image-2.4.27-alpha
thanks
On Tue, Jan 18, 2005 at 07:21:47PM +0100, Thiemo Seufer wrote:
> Horms wrote:
> [snip]
> > The patch from ultramonkey.org above was fished out of
> > a Red Hat Kernel RPM (by me). It still seems to be used
> > in their latest kernel (27.0.1.EL.um.1), so I am going to apply that.
> > But for the other architectures (mips and alpha) there does not
> > seem to be a fix available.
>
> Mips uses the generic version, the non-padding assembly one does only
> to_user/from_user, which is uncritical.
>
> > To be honest I am pretty dubious about the security tag
> > on this bug, I don't believe there is a known exploit
> > and at best the bug seems to be regarded as being minor.
> > Would it be acceptable to remove the security tag?
>
> It could lead to involuntary disclosure of sensitive data.
>
> > Would you be happy to have the bug closed by application of the patch
> > you suggested? Or do you want to hold it open because of the
> > outstanding mips and alpha problem? I am pretty tempted to mark it as
> > upstream and wontfix and reprioritise as wishlist if that is the case.
> > Perhaps splitting and reassigning to the relevant misps and alpha
> > kernel-image packages.
>
> AFAICS reassigning to alpha is ok.
Done :)
--
Horms
Reply to: