Comment by coriny

4 years ago

Patches with built-in bugs made it to stable: https://lore.kernel.org/linux-nfs/YIAta3cRl8mk%2FRkH@unreal/.

6 comments

coriny

Reply
bmcahren  4 years ago

Here's the commit specifically identified by Leon Romanovsky as having a "built-in bug"

https://github.com/torvalds/linux/commit/8e949363f017

  • rigden33  4 years ago

    That commit is from Aditya Pakki who I don't believe is affiliated with the paper in question, whose only authors are Qiushi Wu, and Kangjie Lu.

    • rurban  4 years ago

      We have 4 people, with the students Quishu Wu and Aditya Pakki intruducing the faulty patches, and the 2 others, Prof Kangjie Lu and Ass.Prof Wengwen Wang patching vulnerabilities in the same area. Banning the leader seems ok to me, even if he produced some good fixes and SW to detect it. The only question is Wang who is now in Georgia, and was never caught. Maybe he left Lu at umn because of his questionable ethics.

      2 replies →