Re:size_t-to-int vulnerability in Linux’s filesystem layer
by CrazyPyroLinux on Tuesday July 20, 2021 @11:27AM
(#27894922)
systemd? More like systemK! But seriously, are non-systemd systems not vulnerable to the FUSE portion of this? (CVE-2021-33910)
[ Parent
| on HN ]
Re:size_t-to-int vulnerability in Linux’s filesystem layer
by saurik on Tuesday July 20, 2021 @11:34AM
(#27895007)
FWIW, I feel like your comment is responding to an implicit critique of systemd, but even if one was warranted I didn't read that comment as implying such (as the premise would just be that systemd is a key place in the stack where you would need to be super careful, not that it is somehow less careful than other projects... even if I might claim as such for at least logging ;P); it could be that I am misinterpreting your comment, though?
Re:size_t-to-int vulnerability in Linux’s filesystem layer
by CrazyPyroLinux on Wednesday July 21, 2021 @03:19PM
(#27910801)
Yeah, I think you and a lot of other people misinterpreted my comment, since it was oddly one of my most-downvoted-ever.
My "systemK" joke was indeed implying what you said, that systemd is "a key place in the stack where you would need to be super careful." (Almost Kernel-like.)
And my question was legitimate, although poorly-researched. Answering myself: CVE-2021-33910 only affects systemd, not all FUSE in general.