Return-Path: Message-ID: <551298C5.3070200@ahsoftware.de> Date: Wed, 25 Mar 2015 12:15:17 +0100 From: Alexander Holler MIME-Version: 1.0 To: Greg Kroah-Hartman CC: linux-kernel@vger.kernel.org, stable@vger.kernel.org, Al Viro Subject: Re: [PATCH 3.19 091/123] gadgetfs: use-after-free in ->aio_read() References: <20150324154423.655554012@linuxfoundation.org> <20150324154428.117696639@linuxfoundation.org> <55119F29.5030308@ahsoftware.de> <20150324175850.GA7215@kroah.com> <5511A7C0.2000807@ahsoftware.de> <20150325083353.GC28204@kroah.com> <55127E8F.6010007@ahsoftware.de> <20150325101507.GA20259@kroah.com> <551294E6.5020609@ahsoftware.de> <20150325110825.GA23629@kroah.com> In-Reply-To: <20150325110825.GA23629@kroah.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: Am 25.03.2015 um 12:08 schrieb Greg Kroah-Hartman: > On Wed, Mar 25, 2015 at 11:58:46AM +0100, Alexander Holler wrote: >>> As this has been broken since 3.16, and no one has taken the time to fix >>> it since then, it's not really an issue here, people can just use 4.0 if >>> they want it. >> >> Just a hint I think which should be kept in mind: Debian still uses >> something below 3.16, which very likely is the reason why nobody has hit >> (and examined) these bugs before. > > Not all the world is Debian :) > Sure, but e.g. the already small group of users of gadgetfs seem to use debian based distributions. For reasons I can understand (e.g. they aren't hit by the (new) bugs in gadgetfs. ;)