Tsanangudzo pamatehwe akaunzwa neYunivhesiti yeMinnesota yakaziviswa

Pakati pemazuva mashoma apfuura iyo kesi pane zviito zvakatorwa neboka revatsvakurudzi kubva kuYunivhesiti yeMinnesota, kubvira kubva pakuona kwevakawanda, zviito zvakadaro zvine chekuita nekuunzwa kwekusasimba muLinux Kernel hazvina chikonzero.

Uye kunyangwe hazvo boka University of Minnesot Vatsvakurudzikutsikisa tsamba yakavhurika yekukumbira ruregerero, Kubvuma kwavo shanduko kuLinux kernel yakavharwa ne Greg Kroah-Hartman akaburitsa pachena ezvimedu zvakatumirwa kune vanogadzira kernel uye tsamba pamwe nevanochengetedza zvine chekuita neizvi zvigamba.

Zvinokosha kuti zvigamba zvese zvinetswa zvakarambwa Pakutanga kwevagadziri, hapana kana chimwe chezvikamu zvacho chakatenderwa. Izvi zvinojekesa kuti sei Greg Kroah-Hartman akaita nehasha kudaro, sezvo zvisina kujeka izvo vaongorori vangadai vakaita dai zvigamba zvainge zvabvumidzwa nemuchengeti.

Mukufungisisa, vakaita nharo kuti vaida kumhan'ara hutachiona uye havabvumire zvigamba kuenda kuGit, asi hazvizivikanwe zvavaizoita chaizvo kana kuti vangasvika sei kure.

Pakazara, muna Nyamavhuvhu 2020, zvigamba zvishanu zvakatumirwa kubva kune asingazivikanwe kero acostag.ubuntu@gmail.com uye jameslouisebond@gmail.com (tsamba kubva kuna James Bond): maviri akarurama uye matatu anosanganisira zvikanganiso zvakavanzika, achigadzira mamiriro ekuonekwa kwe kusagadzikana.

Chikamu chimwe nechimwe chaingova nemitsara imwe chete kusvika kumana yekodhi. Pfungwa huru yekumashure kwezvimedu zvakashata ndeyekuti kugadzirisa kuyeuka kwekurangarira kunogona kugadzira mamiriro ekusagadzikana kwakasununguka kaviri.

Iyo purojekiti inovavarira kusimudzira kuchengetedzeka kwenzvimbo yekucheka muOSS. Sechikamu cheiyo purojekiti, isu tinodzidza zvingangodaro matambudziko neiyo OSS patching maitiro, kusanganisira izvo zvinokonzera matambudziko uye mazano ekugadzirisa iwo.

Muchokwadi, chidzidzo ichi chinoburitsa mamwe matambudziko, asi chinangwa chawo ndechekudaidzira kuyedza kwekuvandudza iyo
chigamba chekumhanyisa kukurudzira basa rakawanda kuvandudza matekinoroji ekuyedza uye kuongorora zvigamba, uye pakupedzisira kuita kuti OS ive yakachengeteka.

Zvinoenderana nezvakabatiswa izvi, tinopfupikisa maitiro avo, tiongorora zvikonzero chaizvo nei mabug ekumisikidza zvigamba zvichinetsa kubata (nezvose zviri zviviri kuongororwa kwehunhu uye huwandu), uye zvinonyanya kukosha kupa mazano ekugadzirisa dambudziko iri.

Chekutanga chinetso chigamba chakagadzirisa kuyeuka kwendangariro nekuwedzera kufona ku kfree () usati wadzora kutonga kana paine kukanganisa, asi kugadzira mamiriro ekuti uwane nzvimbo yekuyeuka mushure mekusunungurwa (use-after-free).

Chikwata chakatsanangurwa chakarambwa nemuchengeti, uyo akaona dambudziko ndokuratidza kuti gore rapfuura mumwe munhu akange atoedza kutaura shanduko yakafanana uye yakatanga kugamuchirwa, asi akarasa zuva rimwe chete mushure mekuziva mamiriro ekukuvara.

Chikamu chechipiri chaivewo nemamiriro ezvinhu epashure-kuburitsa yekupfeka nyaya. Chigamba chakatsanangurwa hachina kugamuchirwa nemuchengeti, akaramba chigamba nekuda kweimwe dambudziko ne list_add_tail, asi haana kuona kuti "chdev" pointer inogona kuburitswa mu put_device basa, iro rinoshandiswa rinotevera mukufona ku dev_err (& chdev -> dev ..). Nekudaro, chigamba hachina kugamuchirwa, kunyangwe zvikonzero zvisina hukama nekunetseka.

Sezvineiwo, Pakutanga zvaifungidzirwa kuti zvina pamashanu zvigamba zvaive nematambudziko, asi ivo vaongorori vakaita chikanganiso uye mune chinetso chigamba, mumaonero avo, mhinduro chaiyo yakatsanangurwa, pasina mamiriro anofungidzirwa ekushandisa ndangariro mushure mekutanga.

Mubasa iri, tinopa pfungwa ye «kusasimba kusasimba» apo mamiriro ekushomeka ari kushomeka, asi inogona kuve yechokwadi kana mamiriro acho ari zvachose
yakaunzwa nechigamba chechimwe tsikidzi.

Isu zvakare tinogadzira maturusi anotibatsira kuwana nzvimbo dzekodhi dzinogona kutambura
yeiyo bug yekumisikidza zvigamba uye nekupa zvinogona kuita kuti izvi zvipenga zvekutangisa zvigamba zviome kuona.

Kwapera vhiki, ruzivo rwakatumirwa kune vanogadzira kernel nechisungo chekukurukura nezve mukana wekusimudzira kusagadzikana pasi pekufungidzira kwezvishoma zvigadziriso zvekudonha kwendangariro, asi hapana chakataurwa nezve kuyedza kwekare kuendesa zvigamba.

Chidimbu chechitatu chakarambwawo nemuchengeti nekuda kweimwe bug pasina kukuvara (kaviri kunyorera mu pdev).


Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa. Raida minda anozivikanwa ne *

*

*

  1. Inotarisira iyo data: Miguel Ángel Gatón
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako