Re: [PATCH] checkpatch: Add ability to find bad uses of vsprintf %p extensions

2017-02-28 Thread Andrew Morton
On Mon, 27 Feb 2017 12:54:55 -0800 Joe Perches wrote: > %pK was at least once misused at %pk in an out-of-tree module. > This lead to some security concerns. Add the ability to track > single and multiple line statements for misuses of %p. Should we also do this? --- a/lib/vsprintf.c~checkpat

Re: [kernel-hardening] Re: [PATCH] checkpatch: Add ability to find bad uses of vsprintf %p extensions

2017-02-28 Thread Joe Perches
On Tue, 2017-02-28 at 16:11 -0800, Kees Cook wrote: > On Tue, Feb 28, 2017 at 4:06 PM, Andrew Morton > wrote: > > On Mon, 27 Feb 2017 12:54:55 -0800 Joe Perches wrote: > > > > > %pK was at least once misused at %pk in an out-of-tree module. > > > This lead to some security concerns. Add the abi

Re: [PATCH] checkpatch: Add ability to find bad uses of vsprintf %p extensions

2017-02-28 Thread Joe Perches
On Tue, 2017-02-28 at 16:06 -0800, Andrew Morton wrote: > On Mon, 27 Feb 2017 12:54:55 -0800 Joe Perches wrote: > > > %pK was at least once misused at %pk in an out-of-tree module. > > This lead to some security concerns. Add the ability to track > > single and multiple line statements for misus

Re: [kernel-hardening] Re: [PATCH] checkpatch: Add ability to find bad uses of vsprintf %p extensions

2017-02-28 Thread Kees Cook
On Tue, Feb 28, 2017 at 4:06 PM, Andrew Morton wrote: > On Mon, 27 Feb 2017 12:54:55 -0800 Joe Perches wrote: > >> %pK was at least once misused at %pk in an out-of-tree module. >> This lead to some security concerns. Add the ability to track >> single and multiple line statements for misuses of

RE: [PATCH] checkpatch: Add ability to find bad uses of vsprintf %p extensions

2017-02-28 Thread Roberts, William C
> -Original Message- > From: Joe Perches [mailto:j...@perches.com] > Sent: Monday, February 27, 2017 12:55 PM > To: Andrew Morton ; Andy Whitcroft > > Cc: Roberts, William C ; kernel- > harden...@lists.openwall.com; linux-kernel@vger.kernel.org > Subject: [PATCH] checkpatch: Add ability