Hottest Free Downloads - DownloadPipe.com Over 197,000 downloads! Bookmark Now!
DownloadPipe.com - New Downloads Every Minute
 SEARCH:
FAQFAQ    SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

NEWS - Hole in the Linux kernel allows root access (buh-by..

 
Goto page Previous  1, 2, 3, 4
   Linux (Home) -> Advocacy RSS
Next:  [PATCH v3 1/7] vsprintf: factorize "(null)&q..  
Author Message
Tim Smith

External


Since: Dec 26, 2005
Posts: 543



(Msg. 46) Posted: Thu Nov 05, 2009 5:14 pm
Post subject: Re: NEWS - Hole in the Linux kernel allows root access (buh-bye security) [Login to view extended thread Info.]
Archived from groups: comp>os>linux>advocacy (more info?)

In article <hcsao4$4c1$1@news.eternal-september.org>,
"Ezekiel" <zeke DeleteThis @nosuchdomain.com> wrote:
> Don't let little things like the FACT that Finale won 1st place as the best
> music composition software get in way of your idiotic ramblings.

I bet his answer to that will be that Finale doesn't *compose* the
music--the user does.

--
--Tim Smith
Back to top
Login to vote
Hadron

External


Since: Mar 22, 2007
Posts: 124



(Msg. 47) Posted: Thu Nov 05, 2009 5:25 pm
Post subject: Re: NEWS - Hole in the Linux kernel allows root access (buh-bye security) [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Lusotec <nomail DeleteThis @nomail.not> writes:

> cc wrote:
>> Lusotec wrote:
>>> NULL is defined as ZERO and the kernel needs to access that part of
>>> memory. You are right that NULL does not have to be ZERO, but in this
>>> case it is, thus my comment.
>
> One correction to what I wrote before. NULL is always defined as ZERO but a
> null pointer is not required to be equal to a zero pointer, but usually is.
>
>> It does not matter what it is defined as, a NULL pointer does not have
>> to be dereferenced to access address 0 (or whatever it is defined as).
>> Check any number of C FAQs.
>
> If a null pointer is equal to a zero pointer (the most common case) then
> directly, or indirectly, a null pointer has to be used to access address
> zero, even if the zero pointer is the result of some pointer arithmetic's or
> indexing.
>
> Regards.
>

Meanwhile in the real world 99.9999999999999% of compiler/HW
combinations the NULL pointer is indeed simply "0".

I'm not sure what your reason is. The access of address 0 is well known
but does not, as you claim, make accessing via a null pointer
"necessary". Dereferencing a null pointer in C leads to undefined
behaviour. End of story.
Back to top
Login to vote
Lusotec

External


Since: Jul 11, 2009
Posts: 16



(Msg. 48) Posted: Thu Nov 05, 2009 5:25 pm
Post subject: Re: NEWS - Hole in the Linux kernel allows root access (buh-bye security) [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Hadron wrote:
> Lusotec writes:
>>> It does not matter what it is defined as, a NULL pointer does not have
>>> to be dereferenced to access address 0 (or whatever it is defined as).
>>> Check any number of C FAQs.
>>
>> If a null pointer is equal to a zero pointer (the most common case) then
>> directly, or indirectly, a null pointer has to be used to access address
>> zero, even if the zero pointer is the result of some pointer arithmetic's
>> or indexing.
>
> Meanwhile in the real world 99.9999999999999% of compiler/HW
> combinations the NULL pointer is indeed simply "0".

It is *null* pointer, not "NULL pointer". NULL is a constant.

> I'm not sure what your reason is. The access of address 0 is well known
> but does not, as you claim, make accessing via a null pointer
> "necessary".

If a null pointer is equal to a zero pointer then accessing address zero,
directly or indirectly, uses a null pointer since null and zero pointers are
exactly the same. How hard is this to understand!

> Dereferencing a null pointer in C leads to undefined
> behaviour. End of story.

Meanwhile in the real world, 99.9999999999999% of compiler/HW
combinations, dereferencing a null pointer is well defined.

Regards.
Back to top
Login to vote
Hadron

External


Since: Mar 22, 2007
Posts: 124



(Msg. 49) Posted: Thu Nov 05, 2009 5:26 pm
Post subject: Re: NEWS - Hole in the Linux kernel allows root access (buh-bye security) [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Lusotec <nomail.TakeThisOut@nomail.not> writes:

> Hadron wrote:
>> Lusotec writes:
>>>> It does not matter what it is defined as, a NULL pointer does not have
>>>> to be dereferenced to access address 0 (or whatever it is defined as).
>>>> Check any number of C FAQs.
>>>
>>> If a null pointer is equal to a zero pointer (the most common case) then
>>> directly, or indirectly, a null pointer has to be used to access address
>>> zero, even if the zero pointer is the result of some pointer arithmetic's
>>> or indexing.
>>
>> Meanwhile in the real world 99.9999999999999% of compiler/HW
>> combinations the NULL pointer is indeed simply "0".
>
> It is *null* pointer, not "NULL pointer". NULL is a constant.

sorry, predictive text again. nul pointer.

>
>> I'm not sure what your reason is. The access of address 0 is well known
>> but does not, as you claim, make accessing via a null pointer
>> "necessary".
>
> If a null pointer is equal to a zero pointer then accessing address zero,
> directly or indirectly, uses a null pointer since null and zero pointers are
> exactly the same. How hard is this to understand!
>
>> Dereferencing a null pointer in C leads to undefined
>> behaviour. End of story.
>
> Meanwhile in the real world, 99.9999999999999% of compiler/HW
> combinations, dereferencing a null pointer is well defined.
>
> Regards.
>

By the specific platform/compiler. Not by the language.

Yes, we could argue about a null pointer and a zero pointer to the cows
come home.

What are you trying to say here exactly?

Good C programmers do NOT dereference a null pointer. Doing so causes
issues.

I dont think you're being purposely obtuse but what are you trying to
say here?
Back to top
Login to vote
Hadron

External


Since: Mar 22, 2007
Posts: 124



(Msg. 50) Posted: Thu Nov 05, 2009 6:25 pm
Post subject: Re: NEWS - Hole in the Linux kernel allows root access (buh-bye security) [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Chris Ahlstrom <ahlstromc.TakeThisOut@launchmodem.com> writes:

> Hadron pulled this Usenet boner:
>
>> Meanwhile in the real world 99.9999999999999% of compiler/HW
>> combinations the NULL pointer is indeed simply "0".
>
> Wrong.

Not wrong.

>
> Debugging implementations that make use of a processor's automatic
> hardware checking (if available) of address accesses may have a separate
> representation (e.g., offset zero and a unique segment value) for
> every

May have in a debugging situation.


> null pointer constant in the source. (This enables runtime checks to
> trace back dereferences of the null pointer constant to the point
> in the source that created the constant.) (item 750)
>
> http://www.coding-guidelines.com/cbook/cbook1_2.pdf
>
>> I'm not sure what your reason is. The access of address 0 is well known
>> but does not, as you claim, make accessing via a null pointer
>> "necessary". Dereferencing a null pointer in C leads to undefined
>> behaviour. End of story.
>
> Code like the following looks like a dereference, but won't cause a
> fault, because it is not a dereference:
>
> int * n = NULL;
> int * p;
> p = &*n;
>
> Item 1092 from the same book.

That's just the same as p = n;

It's nothing more than a little novelty line that doesnt change the fact
that dereferencing the null pointer is a no no in C.

>
> By the way, that book is pretty eye-opening as to just how many ways both
> compilers and hardware can represent the "null pointer".

"can". In the real world its 0 nearly ALL the time, End of story.
Back to top
Login to vote
Chris Ahlstrom

External


Since: Jul 04, 2009
Posts: 104



(Msg. 51) Posted: Thu Nov 05, 2009 7:12 pm
Post subject: Re: NEWS - Hole in the Linux kernel allows root access (buh-bye [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

cc pulled this Usenet boner:

> On Nov 5, 4:42?pm, Chris Ahlstrom <ahlstr....RemoveThis@launchmodem.com> wrote:
>>
>>
>> Code like the following looks like a dereference, but won't cause a
>> fault, because it is not a dereference:
>>
>> ? ?int * n = NULL;
>> ? ?int * p;
>> ? ?p = &*n;
>>
>> Item 1092 from the same book.
>
> That's in the C standard as well I believe. It's just p=n. What
> Lusotec was saying was that any way to get to address 0 was equal, but
> that's not true.
>
> int* p=NULL;
> int i =*p; /* undefined behavior */
>
> int* p=0;
> int i=*p; /* undefined behavior */
>
> union
> {
> int *u_p;
> int u_i;
> } p;
> p.u_i = 0;
> int i = *p.u_p; /* not undefined behavior */
>
> int* p;
> memset((void *)&p, 0, sizeof(p));
> int i=*p; /* not undefined behavior */
>
> Regardless of the implemenation's value of a null pointer, all of the
> above is always true.

Oh, I agree. I'm not sure what Lusotec is trying to say.

However, I think it would be more fruitful to study this book than this
thread.

--
Q: What is purple and conquered the world?
A: Alexander the Grape.
Back to top
Login to vote
John Fuhrer

External


Since: Nov 04, 2009
Posts: 29



(Msg. 52) Posted: Thu Nov 05, 2009 11:01 pm
Post subject: Re: NEWS - Hole in the Linux kernel allows root access (buh-bye security) [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

On Thu, 05 Nov 2009 17:14:36 -0800, Tim Smith wrote:

> In article <hcsao4$4c1$1@news.eternal-september.org>,
> "Ezekiel" <zeke DeleteThis @nosuchdomain.com> wrote:
>> Don't let little things like the FACT that Finale won 1st place as the best
>> music composition software get in way of your idiotic ramblings.
>
> I bet his answer to that will be that Finale doesn't *compose* the
> music--the user does.

I think that *was* his answer already.

These Linux people are crazy.
Back to top
Login to vote
Peter Köhlmann

External


Since: Jul 05, 2009
Posts: 23



(Msg. 53) Posted: Fri Nov 06, 2009 4:25 am
Post subject: Re: NEWS - Hole in the Linux kernel allows root access (buh-bye security) [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Tim Smith wrote:

> In article <hcsao4$4c1$1@news.eternal-september.org>,
> "Ezekiel" <zeke.TakeThisOut@nosuchdomain.com> wrote:
>> Don't let little things like the FACT that Finale won 1st place as the
>> best music composition software get in way of your idiotic ramblings.
>
> I bet his answer to that will be that Finale doesn't *compose* the
> music--the user does.
>

Right. Exactly as with other notation software. Which don't do prominent
ads about it being "compsosing" software to be cited by lemmings who
happily buy bridges
--
"Last I checked, it wasn't the power cord for the Clue Generator that
was sticking up your ass." - John Novak, rasfwrj
Back to top
Login to vote
DFS

External


Since: Aug 16, 2005
Posts: 856



(Msg. 54) Posted: Fri Nov 06, 2009 11:00 am
Post subject: Re: NEWS - Hole in the Linux kernel allows root access (buh-bye security) [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Tim Smith wrote:
> In article <hcsao4$4c1$1@news.eternal-september.org>,
> "Ezekiel" <zeke.TakeThisOut@nosuchdomain.com> wrote:
>> Don't let little things like the FACT that Finale won 1st place as
>> the best music composition software get in way of your idiotic
>> ramblings.
>
> I bet his answer to that will be that Finale doesn't *compose* the
> music--the user does.


MS Word doesn't process words - the user does.
Back to top
Login to vote
John Fuhrer

External


Since: Nov 04, 2009
Posts: 29



(Msg. 55) Posted: Fri Nov 06, 2009 11:46 am
Post subject: Re: NEWS - Hole in the Linux kernel allows root access (buh-bye security) [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

On Fri, 6 Nov 2009 11:00:46 -0500, DFS wrote:

> Tim Smith wrote:
>> In article <hcsao4$4c1$1@news.eternal-september.org>,
>> "Ezekiel" <zeke.DeleteThis@nosuchdomain.com> wrote:
>>> Don't let little things like the FACT that Finale won 1st place as
>>> the best music composition software get in way of your idiotic
>>> ramblings.
>>
>> I bet his answer to that will be that Finale doesn't *compose* the
>> music--the user does.
>
>
> MS Word doesn't process words - the user does.

Kohlmann is just playing his semantic games in order to squirm out of his
being an idiot.
Back to top
Login to vote
Display posts from previous:   
Related Topics:
[News] [Rival] Expect More Windows Zombies (Another Seriou.. - Microsoft: Windows flaw could steer IE to hackers ,----[ Quote ] | Microsoft said Monday that a flaw in the way its Windows operating system | looks up other computers on the Internet has resurfaced and could expose some | customers to online attacks....

[News] ACCESS Brings Design and Applications to Linux Phones - Reference design targets Linux mobile phones ,----[ Quote | Access has introduced a software reference design for Linux mobile phones | based on Marvell's PXA30x and PXA31x ("Monahans") embedded processors. At | LinuxWorld in San Francisco t...

[News] [Linux] Linux Kernel Now Supports Windows Vista Thr.. - Linux: Improved KVM Performance, Vista Support ,----[ Quote ] | Avi Kivity announced significant performance improvements and | support for running 32-bit Windows Vista as a guest within the | latest release of KVM. `---- http://kerneltrap.org/node/814...

[News] [Linux] Linux Kernel Gets More Sophisticated; Reise.. - Kernel space: On-demand readahead ,----[ Quote ] | A change in how the kernel pre-reads files for an application could add a | little extra speed to MySQL databases on Linux. | | "Readahead" is the act of speculatively reading a portion of a...

[News] New 2.4 Linux Kernel Released, a Look Back at Linux.. - New Linux 2.4 Kernel Released, .35 ,----[ Quote ] | After six months of careful integration and testing, Willy Tarreau has | announced the availability of the Linux kernel version 2.4.35. `---- ..
       Linux (Home) -> Advocacy All times are: Pacific Time (US & Canada) (change)
Goto page Previous  1, 2, 3, 4
Page 4 of 4

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Categories:
 Windows Forums
 Game Forums
  Linux Forums
 Mac Forums
 PDA Forums
 Mobile Forums
  Top  |  Store  |  RSS Feeds RSS  |  Data Feeds  |  Advertise  |  Submit  |  Bookmark  |  Newsletter  |  Contact