RE: Brainy: UAF in iscsi_ioctl.c

2015-09-28 Thread Terry Moore
> > Well, we love Brainy and we always give it credit (or at least try to)! > > > > christos > > Yep! > > I'm just wondering when Max packages up the Brainy tool and starts > getting customers to actually pay for it! It really is one very > excellent tool. +1

Re: Brainy: UAF in iscsi_ioctl.c

2015-09-28 Thread Paul Goyette
On Mon, 28 Sep 2015, Christos Zoulas wrote: In article <57077d1c-4c77-4f82-adc5-723fa1e6f...@gmail.com>, Rich Neswold wrote: On Sep 19, 2015, at 10:27 PM, Roy Marples wrote: But then you would miss out on the Found by Brainy advertisements! ;) You may have meant that in a friendly, teas

Re: Brainy: UAF in iscsi_ioctl.c

2015-09-28 Thread Christos Zoulas
In article <57077d1c-4c77-4f82-adc5-723fa1e6f...@gmail.com>, Rich Neswold wrote: > >> On Sep 19, 2015, at 10:27 PM, Roy Marples wrote: >> >> But then you would miss out on the Found by Brainy advertisements! ;) > >You may have meant that in a friendly, teasing manner, but it comes >across as un

Re: Brainy: UAF in iscsi_ioctl.c

2015-09-28 Thread Rich Neswold
> On Sep 19, 2015, at 10:27 PM, Roy Marples wrote: > > But then you would miss out on the Found by Brainy advertisements! ;) You may have meant that in a friendly, teasing manner, but it comes across as ungrateful. Brainy has found a large number of sloppy programming bugs in the NetBSD kerne

Re: Brainy: UAF in iscsi_ioctl.c

2015-09-26 Thread Maxime Villard
Le 19/09/2015 20:33, David Holland a écrit : > On Sat, Sep 19, 2015 at 04:18:38PM +0200, Maxime Villard wrote: > > Hi, > > in sys/dev/iscsi/iscsi_ioctl.c: > > > > 1542 free(sess, M_DEVBUF); > > 1543 > > 1544 DEB(1, ("Cleanup: session ended %d\n", sess->id)); > >

Re: Brainy: UAF in iscsi_ioctl.c

2015-09-19 Thread Paul Goyette
On Sun, 20 Sep 2015, Roy Marples wrote: On 2015-09-19 19:33, David Holland wrote: On Sat, Sep 19, 2015 at 04:18:38PM +0200, Maxime Villard wrote: > Hi, > in sys/dev/iscsi/iscsi_ioctl.c: > > 1542 free(sess, M_DEVBUF); > 1543 > 1544 DEB(1, ("Cleanup: session ended

Re: Brainy: UAF in iscsi_ioctl.c

2015-09-19 Thread Roy Marples
On 2015-09-19 19:33, David Holland wrote: On Sat, Sep 19, 2015 at 04:18:38PM +0200, Maxime Villard wrote: > Hi, > in sys/dev/iscsi/iscsi_ioctl.c: > > 1542 free(sess, M_DEVBUF); > 1543 > 1544 DEB(1, ("Cleanup: session ended %d\n", sess->id)); > > I guess inverting

Re: Brainy: UAF in iscsi_ioctl.c

2015-09-19 Thread David Holland
On Sat, Sep 19, 2015 at 04:18:38PM +0200, Maxime Villard wrote: > Hi, > in sys/dev/iscsi/iscsi_ioctl.c: > > 1542 free(sess, M_DEVBUF); > 1543 > 1544 DEB(1, ("Cleanup: session ended %d\n", sess->id)); > > I guess inverting the two instructions fixes the bug. > > Found by

Brainy: UAF in iscsi_ioctl.c

2015-09-19 Thread Maxime Villard
Hi, in sys/dev/iscsi/iscsi_ioctl.c: 1542free(sess, M_DEVBUF); 1543 1544DEB(1, ("Cleanup: session ended %d\n", sess->id)); I guess inverting the two instructions fixes the bug. Found by Brainy. Maxime