Re: [CHECKER] possible missing capability check in ioctl function, drivers/net/cris/eth_v10.c, kernel 2.6.11

2005-04-15 Thread Chris Wright
* Ted Kremenek ([EMAIL PROTECTED]) wrote: > In several network drivers that handle the ioctl command SIOCSMIIREG > (writes a register on the network card) most implementations check for > the CAP_NET_ADMIN capability. Several drivers use the function > "generic_mii_ioctl" to process this comman

Re: [CHECKER] possible missing capability check in ioctl function, drivers/net/cris/eth_v10.c, kernel 2.6.11

2005-04-15 Thread Mitchell Blank Jr
Ted Kremenek wrote: > Currently we are looking primarily into the > ioctls in drivers/net, Just as a small aside, a little over five years ago (wow does time fly!) I did a manual audit for mistakes like this: http://lkml.org/lkml/2000/3/7/156 Not sure if that's relevant to your work your not...

[CHECKER] possible missing capability check in ioctl function, drivers/net/cris/eth_v10.c, kernel 2.6.11

2005-04-14 Thread Ted Kremenek
Hello, I'm a researcher in the Stanford Metacompilation group. I am collaborating with Bryan Fulton at Coverity on using static analysis to find capability related security errors. We're currently looking into creating a checker using statistical analysis to detect improper or missing capabil