[lkml]   [2013]   [Dec]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH 1/9] Known exploit detection
On Thu, Dec 12, 2013 at 07:25:23PM -0500, Dave Jones wrote:
> On Thu, Dec 12, 2013 at 01:13:41PM -0800, Kees Cook wrote:
> > - who will keep adding these triggers going forward?
> also..
> - Who will test the existing triggers are doing the right thing when related code changes.

- how do you determine an "expoit attempt" from "userspace program
doing something stupid" / "corrupted filesytem mounted"?

I really don't like this, it means that our normal error handling for
userspace data will suddenly all have CVE entries on them over time.
How is that helpful to anyone?

Think ahead in 10-20 years, what is the code paths going to look like
then? Horrible...

greg k-h

 \ /
  Last update: 2013-12-13 03:21    [W:0.153 / U:0.584 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site