Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1540060

Re: CVE-2016-7097 causes acl leak

Show all headers | View raw

On Mon, Dec 05, 2016 at 09:16:31AM -0800, Mark Salyzyn wrote:
> Commit 073931017b49d9458aa351605b43a7e34598caef has several occurrences of
> an acl leak.
> 
> posix_acl_update_mode(inose, &mode, &acl);
> 
> . . .
> 
> posix_acl_release(acl);
> 
> 
> acl is NULLed in posix_acl_update_mode to signal caller to not update the
> acl; but because it is nulled, it is never released.

Any reason you didn't cc: the authors of that patch and the correct
mailing list for it (hint, use scripts/get_maintainer.pl on the
patch...)

Try that and see what happens...

thanks,

greg k-h

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

CVE-2016-7097 causes acl leak Mark Salyzyn <salyzyn@android.com> - 2016-12-05 18:20 +0100
  Re: CVE-2016-7097 causes acl leak Greg KH <gregkh@linuxfoundation.org> - 2016-12-11 21:40 +0100
  Re: CVE-2016-7097 causes acl leak Cong Wang <xiyou.wangcong@gmail.com> - 2016-12-12 01:40 +0100
    Re: CVE-2016-7097 causes acl leak Jan Kara <jack@suse.cz> - 2016-12-12 11:50 +0100
      Re: CVE-2016-7097 causes acl leak Cong Wang <xiyou.wangcong@gmail.com> - 2016-12-12 22:20 +0100
    Re: CVE-2016-7097 causes acl leak Mark Salyzyn <salyzyn@android.com> - 2016-12-13 01:30 +0100
      Re: CVE-2016-7097 causes acl leak Cong Wang <xiyou.wangcong@gmail.com> - 2016-12-13 07:30 +0100
        Re: CVE-2016-7097 causes acl leak Jan Kara <jack@suse.cz> - 2016-12-13 12:30 +0100
          Re: CVE-2016-7097 causes acl leak Cong Wang <xiyou.wangcong@gmail.com> - 2016-12-14 01:00 +0100
        Re: CVE-2016-7097 causes acl leak Mark Salyzyn <salyzyn@android.com> - 2016-12-13 17:00 +0100
          Re: CVE-2016-7097 causes acl leak Jan Kara <jack@suse.cz> - 2016-12-13 17:10 +0100
        Re: CVE-2016-7097 causes acl leak Mark Salyzyn <salyzyn@android.com> - 2016-12-14 00:50 +0100
          Re: CVE-2016-7097 causes acl leak Greg KH <gregkh@linuxfoundation.org> - 2016-12-14 01:10 +0100
            Re: CVE-2016-7097 causes acl leak Mark Salyzyn <salyzyn@android.com> - 2016-12-14 21:30 +0100
              Re: CVE-2016-7097 causes acl leak Greg KH <gregkh@linuxfoundation.org> - 2016-12-15 00:40 +0100
                Re: CVE-2016-7097 causes acl leak Mark Salyzyn <salyzyn@android.com> - 2016-12-15 16:30 +0100
                Re: CVE-2016-7097 causes acl leak Jan Kara <jack@suse.cz> - 2016-12-15 17:40 +0100
      Re: CVE-2016-7097 causes acl leak Jan Kara <jack@suse.cz> - 2016-12-13 12:20 +0100

csiph-web