Re: [PATCH v2] vsprintf: kptr_restrict is okay in IRQ when 2

2016-02-07 Thread Rasmus Villemoes
On Fri, Feb 05 2016, Kees Cook wrote: >> switch (kptr_restrict) { >> case 0: >> /* Always print %pK values */ >> break; >> case 1: { >> + const struct cred *cred; >> + >> +

Re: [PATCH v2] vsprintf: kptr_restrict is okay in IRQ when 2

2016-02-05 Thread Kees Cook
On Fri, Feb 5, 2016 at 2:03 PM, Jason A. Donenfeld wrote: > The kptr_restrict flag, when set to 1, only prints the kernel > address when the user has CAP_SYSLOG. When it is set to 2, the > kernel address is always printed as zero. When set to 1, this > needs to check whether or not we're in IRQ. H

[PATCH v2] vsprintf: kptr_restrict is okay in IRQ when 2

2016-02-05 Thread Jason A. Donenfeld
The kptr_restrict flag, when set to 1, only prints the kernel address when the user has CAP_SYSLOG. When it is set to 2, the kernel address is always printed as zero. When set to 1, this needs to check whether or not we're in IRQ. However, when set to 2, this check is unneccessary, and produces con