Re: Security support status of xnf(4) and xbf(4)

2022-03-25 Thread Chris Cappuccio
Demi Marie Obenour [d...@invisiblethingslab.com] wrote: > Linux???s netfront and blkfront drivers recently had a security > vulnerability (XSA-396) that allowed a malicious backend to potentially > compromise them. In follow-up audits, I found that OpenBSD???s xnf(4) > currently trusts the backend

usr.sbin/usbdevs: more host controllers

2022-03-25 Thread SASANO Takayoshi
hello, Current /usr/sbin/usbdevs handles up to 10 USB host controllers. But my PC has 11 hosts, here is the result of dmesg | grep usb. usb0 at xhci0: USB revision 3.0 uhub0 at usb0 configuration 1 interface 0 "ASMedia xHCI root hub" rev 3.00/1.00 addr 1 usb1 at ehci0: USB revision 2.0 uhu

Re: Security support status of xnf(4) and xbf(4)

2022-03-25 Thread Demi Marie Obenour
On 3/25/22 18:42, Chris Cappuccio wrote: > Demi Marie Obenour [d...@invisiblethingslab.com] wrote: >> Linux???s netfront and blkfront drivers recently had a security >> vulnerability (XSA-396) that allowed a malicious backend to potentially >> compromise them. In follow-up audits, I found that Ope

Re: clang: compile static analyzer

2022-03-25 Thread Steffen Nurpmeso
Joerg Sonnenberger wrote in : |Am Fri, Jan 21, 2022 at 12:45:56AM +0100 schrieb Steffen Nurpmeso: |> Fwiw, i have been astonished by this thread. I found scan-build |> to generate a lot of false warnings, so much indeed that i stopped |> using it .. in summer 2017. | |I've spend time on the

Security support status of xnf(4) and xbf(4)

2022-03-25 Thread Demi Marie Obenour
Linux’s netfront and blkfront drivers recently had a security vulnerability (XSA-396) that allowed a malicious backend to potentially compromise them. In follow-up audits, I found that OpenBSD’s xnf(4) currently trusts the backend domain. I reported this privately to Theo de Raadt, who indicated