mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
* [git pull] PCI fixes for 2.6.26
@ 2008-07-01 17:04 Jesse Barnes
  2008-07-02 18:34 ` Jesse Barnes
  0 siblings, 1 reply; 5+ messages in thread
From: Jesse Barnes @ 2008-07-01 17:04 UTC (permalink / raw)
  To: Linus Torvalds, lkml

I'll stop making predictions about whether this is the last pull request for 
2.6.26 or not, but it is an important one.  It turns out that we've had a 
trivial DoS on machines containing PCI devices with bad VPDs.  We're 
entertaining a few options for a scalable, long term fix, but in the 
meantime, restricting access to the sysfs VPD file seems prudent.  I've 
included the patch in lieu of a diffstat since it's so small.

Thanks,
Jesse

Ben Hutchings (1):
      PCI: Restrict VPD read permission to root

diff --git a/drivers/pci/pci-sysfs.c b/drivers/pci/pci-sysfs.c
index 6f3c744..1f855f0 100644
--- a/drivers/pci/pci-sysfs.c
+++ b/drivers/pci/pci-sysfs.c
@@ -738,7 +738,7 @@ int __must_check pci_create_sysfs_dev_files (struct 
pci_dev
                        pdev->vpd->attr = attr;
                        attr->size = pdev->vpd->ops->get_size(pdev);
                        attr->attr.name = "vpd";
-                       attr->attr.mode = S_IRUGO | S_IWUSR;
+                       attr->attr.mode = S_IRUSR | S_IWUSR;
                        attr->read = pci_read_vpd;
                        attr->write = pci_write_vpd;
                        retval = sysfs_create_bin_file(&pdev->dev.kobj, attr);


^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [git pull] PCI fixes for 2.6.26
  2008-07-01 17:04 [git pull] PCI fixes for 2.6.26 Jesse Barnes
@ 2008-07-02 18:34 ` Jesse Barnes
  2008-07-03  1:57   ` Linus Torvalds
  0 siblings, 1 reply; 5+ messages in thread
From: Jesse Barnes @ 2008-07-02 18:34 UTC (permalink / raw)
  To: Linus Torvalds; +Cc: lkml

On Tuesday, July 01, 2008 10:04 am Jesse Barnes wrote:
> I'll stop making predictions about whether this is the last pull request
> for 2.6.26 or not, but it is an important one.  It turns out that we've had
> a trivial DoS on machines containing PCI devices with bad VPDs.  We're
> entertaining a few options for a scalable, long term fix, but in the
> meantime, restricting access to the sysfs VPD file seems prudent.  I've
> included the patch in lieu of a diffstat since it's so small.

Ok, doesn't look like you've pulled yet, so I queued up a couple more crash
fixes (shortlog & diffstat include previous stuff as well).

Alex Chiang (1):
      PCI: acpiphp: cleanup notify handler on all root bridges

Ben Hutchings (1):
      PCI: Restrict VPD read permission to root

Benjamin Li (1):
      PCI: Limit VPD read/write lengths for Broadcom 5706, 5708, 5709 rev.

 drivers/pci/access.c               |   14 +++---------
 drivers/pci/hotplug/acpiphp_glue.c |   17 ++++++++++++--
 drivers/pci/pci-sysfs.c            |    4 +--
 drivers/pci/pci.h                  |    2 -
 drivers/pci/quirks.c               |   42 +++++++++++++++++++++++++++++++++++++
 5 files changed, 63 insertions(+), 16 deletions(-)

Thanks,
Jesse

^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [git pull] PCI fixes for 2.6.26
  2008-07-02 18:34 ` Jesse Barnes
@ 2008-07-03  1:57   ` Linus Torvalds
  2008-07-03  2:15     ` Jesse Barnes
  0 siblings, 1 reply; 5+ messages in thread
From: Linus Torvalds @ 2008-07-03  1:57 UTC (permalink / raw)
  To: Jesse Barnes; +Cc: lkml



On Wed, 2 Jul 2008, Jesse Barnes wrote:
> 
> Ok, doesn't look like you've pulled yet, so I queued up a couple more crash
> fixes (shortlog & diffstat include previous stuff as well).

Well, I won't be pulling, since you don't even tell me where to pull 
_from_, in either of your emails.

Yeah, yeah, I could easily guess, and it would work, but I'm not going to. 
Please just always include the repo URL and branch to pull from.

		Linus

^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [git pull] PCI fixes for 2.6.26
  2008-07-03  1:57   ` Linus Torvalds
@ 2008-07-03  2:15     ` Jesse Barnes
  0 siblings, 0 replies; 5+ messages in thread
From: Jesse Barnes @ 2008-07-03  2:15 UTC (permalink / raw)
  To: Linus Torvalds; +Cc: lkml

On Wednesday, July 02, 2008 6:57 pm Linus Torvalds wrote:
> On Wed, 2 Jul 2008, Jesse Barnes wrote:
> > Ok, doesn't look like you've pulled yet, so I queued up a couple more
> > crash fixes (shortlog & diffstat include previous stuff as well).
>
> Well, I won't be pulling, since you don't even tell me where to pull
> _from_, in either of your emails.
>
> Yeah, yeah, I could easily guess, and it would work, but I'm not going to.
> Please just always include the repo URL and branch to pull from.

Oh I fail.  I'll send a fresh pull request.

Jesse

^ permalink raw reply	[flat|nested] 5+ messages in thread

* [git pull] PCI fixes for 2.6.26
@ 2008-07-03  2:20 Jesse Barnes
  0 siblings, 0 replies; 5+ messages in thread
From: Jesse Barnes @ 2008-07-03  2:20 UTC (permalink / raw)
  To: Linus Torvalds, lkml, linux-pci

Please pull some PCI fixes for 2.6.26:
git pull git://git.kernel.org/pub/scm/linux/kernel/git/jbarnes/pci-2.6.git for-linus

This pull includes fixes for a few crashers.  They're not common (an ACPI
hotplug load/unload issue and an issue with the sysfs VPD file, so there's
no need to panic, but this stuff needs to get fixed asap nonetheless.

Thanks,
Jesse

Alex Chiang (1):
      PCI: acpiphp: cleanup notify handler on all root bridges

Ben Hutchings (1):
      PCI: Restrict VPD read permission to root

Benjamin Li (1):
      PCI: Limit VPD read/write lengths for Broadcom 5706, 5708, 5709 rev.

 drivers/pci/access.c               |   14 +++--------
 drivers/pci/hotplug/acpiphp_glue.c |   17 +++++++++++---
 drivers/pci/pci-sysfs.c            |    4 +--
 drivers/pci/pci.h                  |    2 -
 drivers/pci/quirks.c               |   42 +++++++++++++++++++++++++++++++++++
 5 files changed, 63 insertions(+), 16 deletions(-)

^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2008-07-03  7:05 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2008-07-01 17:04 [git pull] PCI fixes for 2.6.26 Jesse Barnes
2008-07-02 18:34 ` Jesse Barnes
2008-07-03  1:57   ` Linus Torvalds
2008-07-03  2:15     ` Jesse Barnes
2008-07-03  2:20 Jesse Barnes

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

Powered by JetHome