Messages in this thread | | | Date | Tue, 29 Sep 2015 20:41:41 +0200 | From | Borislav Petkov <> | Subject | Re: [PATCH] arch/x86: fix out-of-bounds in get_wchan() |
| |
On Tue, Sep 29, 2015 at 11:30:33AM -0700, Andy Lutomirski wrote: > Also, I like Borislav's READ_ONCE suggestion. Let's avoid TOCTOU due > to optimization.
Dmitry's original patch did READ_ONCE already.
> Re: a CVE: if anyone wants a CVE, ask oss-security. It's unclear to me > exactly how one might exploit this.
I was just asking - it possibly leaking sensitive info and all.
-- Regards/Gruss, Boris.
ECO tip #101: Trim your mails when you reply.
| |