Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1584577

RE: [PATCH 0/3] ipc subsystem refcounter conversions

From "Reshetova, Elena" <elena.reshetova@intel.com>
Newsgroups linux.kernel
Subject RE: [PATCH 0/3] ipc subsystem refcounter conversions
Date 2017-02-20 13:40 +0100
Message-ID <tcVq2-4F1-9@gated-at.bofh.it> (permalink)
References <tcUtX-453-3@gated-at.bofh.it> <tcUDE-48G-25@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

> On Mon, Feb 20, 2017 at 1:29 PM, Elena Reshetova
> <elena.reshetova@intel.com> wrote:
> > Now when new refcount_t type and API are finally merged
> > (see include/linux/refcount.h), the following
> > patches convert various refcounters in the ipc susystem from atomic_t
> > to refcount_t. By doing this we prevent intentional or accidental
> > underflows or overflows that can led to use-after-free vulnerabilities.
> >
> > The below patches are fully independent and can be cherry-picked separately.
> > Since we convert all kernel subsystems in the same fashion, resulting
> > in about 300 patches, we have to group them for sending at least in some
> > fashion to be manageable. Please excuse the long cc list.
> 
> Is that done using coccinelle?

Yes and no. 
The *finding* of cases that should be converted was done using coccinelle, but actual conversion was done manually for each case and not via semantic patch. 
There were many false-positives and all kind of other issues, so we had to analyse each variable separately to the extend we understand the code.  

> 
> Can I see the semantic patch (sorry if I missed it earlier)?

Attached is the one we used to initially find variables. 

Best Regards,
Elena.

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

[PATCH 0/3] ipc subsystem refcounter conversions Elena Reshetova <elena.reshetova@intel.com> - 2017-02-20 12:40 +0100
  Re: [PATCH 0/3] ipc subsystem refcounter conversions Andy Shevchenko <andy.shevchenko@gmail.com> - 2017-02-20 12:50 +0100
    RE: [PATCH 0/3] ipc subsystem refcounter conversions "Reshetova, Elena" <elena.reshetova@intel.com> - 2017-02-20 13:40 +0100
  Re: [PATCH 0/3] ipc subsystem refcounter conversions Davidlohr Bueso <dave@stgolabs.net> - 2017-02-22 16:50 +0100

csiph-web