4 ms·
From the patch [1]: > This reverts commit e0abdadcc6e1. [...] Its not clear to me why this commit was made. Anyone dug up the history here? [1] https://lore.
by bakkoting 3y ago
From the patch [1]:
> This reverts commit e0abdadcc6e1. [...] Its not clear to me why this commit was made.
Anyone dug up the history here?
[1] https://lore.kernel.org/all/20240120215012.129529-1-fw@strlen.de/ https://lore.kernel.org/all/20240120215012.129529-1-fw@strle...
- tg180 3y agohttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e0abdadcc6e1 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin... > netfilter: nf_tables: accept QUEUE/DROP verdict parameters > Allow userspace to specify the queue number or the errno code for QUEUE and DROP verdicts.
- loeg 3y agoYeah, but why?
- rokkitmensch 3y agoIf one has to ask, it's a Five Eyes plant.
- aseipp 3y agoHardly. This is just a typical double free vulnerability, AKA a normal Tuesday in the C/C++ world, and which people have been exploiting in the kernel (with its complex object lifetimes and semantics) for well over 10 years now. There's no need to "plant" anything to find these.
- rokkitmensch 3y agoWhich makes it a fine cover!
- aseipp 3y agoThe original commit is over 10 years old now, so it's probably lost to the sands of time. I did some looking but couldn't find anything on the old netdev lists. Maybe the patch was sent directly to Pablo Neira Ayuso, the committer. It was part of a series so it's not like it was a one-off patch. In a strange twist of fate, the original author was Patrick McHardy who is now a persona non grata. Unless Pablo can remember or dig it from his emails, it probably won't ever be clear exactly what the use case was, at least not through basic investigation.