On 12/20/14 09:43, Paige Thompson wrote:
> On 12/20/14 09:40, Jiri Kosina wrote:
>> On Sat, 20 Dec 2014, Jiri Kosina wrote:
>>
>>>> yes the hid_sony driver is buggy and the hardening makes it visible. It
>>>> passes structures on stack (as parameters to hid_hw_raw_request() to
>>>> HID/USB as DMA-able buffers. These structures must be allocated via
>>>> kmalloc() or USB allocation primitives.
>>> This has already been fixed in Linus' tree for 3.9-rc1.
>> 3.19-rc1, sorry for the typo. The commit in question was 9b2b5c9a79.
>>
> Hahaha, I was about to say...
>
> Interesting! Thanks again everyone for your help I really appreciate it.
>
> -Paige
>

Well and it looks like I am SOL until grsec gets a version bump, lol.
Otherwise I was about to add an ebuild in my overlay for it. I'm kind of
looking forward to it actually, I want to check out nftables... not that
I couldn't just grab 3.19 sources and compile it I just don't want to
leave hardened-land I guess.


https://grsecurity.net/test/grsecurity-3.0-3.17.7-201412170700.patch

PS: Anyone have any idea how grsec versioning works? will they start
supporting the 3.19 branch anytime soon?



Reply via email to