[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <20180711010252.526E84C8@webmail.sinamail.sina.com.cn>
Date: Wed, 11 Jul 2018 09:02:52 +0800
From: <zrlw@...a.com>
To: "oss-security" <oss-security@...ts.openwall.com>
Cc: "Solar Designer" <solar@...nwall.com>
Subject: Re: mmap vulnerability in motion eye video4linux driver for Sony Vaio PictureBook
yes, i found the pl and sent to the maintainer mchehab@...nel.org and linux-media mail list linux-media@...r.kernel.org last week, the last one boudanced me with something like 'Your address is not liked source for email' blah...
i don't have Sony Vaio PictureBook, so i just check the souces and docs again.
/usr/src/packages/BUILD/kernel-default-4.4.21/linux-4.4/Documentation/video4linux/v4l2-framework.txt:
'The v4l2_file_operations struct is a subset of file_operations. The main
difference is that the inode argument is omitted since it is never used.'
# ls /dev/video0crw-rw---- 1 root video 81, 0 Jul 11 08:14 /dev/video0
commit be83bbf80682 file_mmap_size_max check conditions:1. S_ISREG(inode->i_mode) 2. S_ISBLK(inode->i_mode)3. file->f_mode & FMODE_UNSIGNED_OFFSET
I doubt which one will be true.
----- Original Message -----
From: Greg KH <greg@...ah.com>
To: oss-security@...ts.openwall.com, zrlw@...a.com
Cc: Solar Designer <solar@...nwall.com>
Subject: Re: [oss-security] mmap vulnerability in motion eye video4linux driver for Sony Vaio PictureBook
Date: 2018-07-10 21:41
On Sat, Jul 07, 2018 at 12:09:37AM +0800, zrlw@...a.com wrote:
> I sent a email to the original authors which i found in the head of
> meye.c, but i don't receive any response util now.
Always use the scripts/get_maintainer.pl tool to find who to send stuff
like this to. It will include a public mailing list or two.
> I don't think
> commit be83bbf80682 will work on this case, this driver derived from
> v4l2-core which not use inode, maybe i'm wrong.
I think you are wrong, but it would be great if you could test to verify
it or not.
thanks,
greg k-h
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
