initial commit
imported from https://salsa.debian.org/kernel-team/linux.git commit 9d5cc9d9d6501d7f1dd7e194d4b245bd0b6c6a22 version 6.11.4-1
This commit is contained in:
23
debian/patches/bugfix/all/module-disable-matching-missing-version-crc.patch
vendored
Normal file
23
debian/patches/bugfix/all/module-disable-matching-missing-version-crc.patch
vendored
Normal file
@@ -0,0 +1,23 @@
|
||||
From: Ben Hutchings <ben@decadent.org.uk>
|
||||
Date: Fri, 02 Dec 2016 23:06:18 +0000
|
||||
Subject: module: Disable matching missing version CRC
|
||||
Forwarded: not-needed
|
||||
|
||||
This partly reverts commit cd3caefb4663e3811d37cc2afad3cce642d60061.
|
||||
We want to fail closed if a symbol version CRC is missing, as the
|
||||
alternative may allow subverting module signing.
|
||||
---
|
||||
--- a/kernel/module/version.c
|
||||
+++ b/kernel/module/version.c
|
||||
@@ -46,9 +46,8 @@ int check_version(const struct load_info
|
||||
goto bad_version;
|
||||
}
|
||||
|
||||
- /* Broken toolchain. Warn once, then let it go.. */
|
||||
- pr_warn_once("%s: no symbol version for %s\n", info->name, symname);
|
||||
- return 1;
|
||||
+ pr_warn("%s: no symbol version for %s\n", info->name, symname);
|
||||
+ return 0;
|
||||
|
||||
bad_version:
|
||||
pr_warn("%s: disagrees about version of symbol %s\n", info->name, symname);
|
Reference in New Issue
Block a user