Re: [vendor-sec] Re: [BUG/PATCH/RFC] Oops while completing async USB via usbdevio

From: Harald Welte
Date: Wed Oct 12 2005 - 04:58:47 EST


On Tue, Oct 11, 2005 at 04:44:41PM -0700, Linus Torvalds wrote:
> I _think_ I fixed the disconnect thing too, although I think Harald's
> naming for the disconnect structure was cleaner, so I wouldn't mind having
> a (tested) patch on top of mine..
> [...]
> But for 2.6.14, the most important thing would be to verify that the oops
> cannot happen, and that you can't send signals to setuid programs by doing
> an "open(usb) + fork(keep it open in the child) + exec(suid in the
> parent)"

I'm busy giving a netfilter tutorial all day, but I'll do the
incremental patch + testing tonight. So I expect some kind of reply on
this at about 11pm (GMT+1).

Sorry once again for the delays, but as I said initially: I'm neither a
core kernel / scheduler nor a USB developer. If somebody else had taken
the bug, we'd have had way less round-trips...

Cheers,
--
- Harald Welte <laforge@xxxxxxxxxxxx> http://gnumonks.org/
============================================================================
"Privacy in residential applications is a desirable marketing option."
(ETSI EN 300 175-7 Ch. A6)

Attachment: pgp00000.pgp
Description: PGP signature