¡ʇǝuɹǝʇuı ǝɥʇ ɹoɟ ʎɐɹooɥ ˙ɥɔǝǝds ɟo ɯopǝǝɹɟ ǝɥʇ doʇs oʇ ʎɐʍ ou s,ǝɹǝɥʇ puɐ ɹǝʇʇɐɯ ɔıʇoıpı uɐ ɥɔns sı ʇuǝʇuoɔ ʇǝuɹǝʇuı ƃuıɹǝʇlıɟ ˙ǝuo sıɥʇ ǝʞıl slooʇ ƃuısn uʍop ǝpısdn puɐ pɹɐʍʞɔɐq ǝʇıɹʍ ’sɹǝʇlıɟ ǝsǝuıɥɔ ǝɥʇ ʇsɐd dıls oʇ ʎɐʍ ʍǝu ɐ ɥʇıʍ dn ǝɯoɔ sɹǝƃƃolq ǝsǝuıɥɔ ’sɹosuǝɔ ʇǝuɹǝʇuı ǝɯoɔɹǝʌo oʇ
While getting my nightly fix of reddit programming news, I come across this entry about a cryptography song called “Crypto”:
You can download the mp3 file and get the lyrics from Peteris Krumins’ original post.
The exploit allow local users to gain root access using a “proof of concept” exploit. The exploit worked on my machine (Kernel 2.6.22-gentoo-r2).
The bug report:
And here’s a working patch:
--- a/fs/splice.c +++ b/fs/splice.c @@ -1234,7 +1234,7 @@ static int get_iovec_page_array(const struct iovec __user *iov, if (unlikely(!len)) break; error = -EFAULT; - if (unlikely(!base)) + if (!access_ok(VERIFY_READ, base, len)) break; /*
Links
Sprout: The Online WYSIWYG Editor for Flash
Microsoft wants to purchase Yahoo
Images
I hope those pillars are strong
PICTURES: Australia’s Monster Motorbike
Firefox crash
It’s cold
Making the city work together LOL
Videos
Gigantic Mech Animals are a Seriously Stylish Way to Travel
Personal helicopter
Frozen Grand Central
Geeky (click at your own risk!)
Richard Stallman does not use a web browser. At all.
Richard Stallman is the new Chuck Norris
GRUB/Chainloaded CD-ROM








