[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ABI change in fix for CVE-2008-5029



On Fri, 2008-11-14 at 13:29 -0700, dann frazier wrote:
> The fix for CVE-2008-5029[1], part of 2.6.26.8, changes the ABI.
> We have verified that this issue affects the etch kernels as well and
> I'm currently testing a backport for 2.6.18.
> 
> Because this affects a significant number of symbols, it doesn't look
> to me like a safe thing to ignore w/ the #ifdef __GENKSYMS__ trick, so
> its looking like we need to increment the ABI for the stable kernels,
> and perhaps the lenny kernel. Do others on the team have a different
> opinion?
> 
> [1] http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git;a=commitdiff;h=1e675381c2c443e84ba7bea055017ded1ac8f816

I don't believe it is valid for external modules to allocate either of
those structures.  So if we put the additional members at the ends of
those structures instead of the beginning/middle there may be no need to
increment the ABI.

Ben.

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: