Re: security: potential out-of-bound read at ewah_io.c |ewah_read_mmap|

From: Jeff King <peff@peff.net>
Date: Jun 19, 2018, 19:56 UTC
Message-ID: <20180619195649.GA1499@sigill.intra.peff.net>
In-Reply-To: <CO2PR01MB20383AC645BE4FD6BF47C697F1700@CO2PR01MB2038.prod.exchangelabs.com>

On Tue, Jun 19, 2018 at 07:00:48PM +0000, Dyer, Edwin wrote:

> Just curious if there was any additional comment on this potential
> OOB? I may have missed it and if so, apologies for the ask.

The fix is in master, and should be part of the upcoming v2.18. See commit 9d2e330b17 (ewah_read_mmap: bounds-check mmap reads, 2018-06-14).

-Peff

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.