ltpにcveテストが追加されてた
rasberry pi2/rasbian(nano pi neo 2/armbianは完走しなかったw−。)の負荷テスト代わりに、
linux test projectのtag20170929を流してたらなんかcveテストっぽいログ発見w−
$ dmesg ... [35069.867684] input: virtual-device-ltp as /devices/virtual/input/input4 [35070.007192] LTP: starting input06 [35070.037723] input: virtual-device-ltp as /devices/virtual/input/input5 [35070.788106] LTP: starting cve-2011-0999 (thp01 -I 120) [35190.847369] LTP: starting cve-2011-2183 (ksm05 -I 10) [35190.879863] LTP: starting cve-2011-2496 (vma03) [35190.910846] LTP: starting cve-2012-0957 [35190.941755] LTP: starting cve-2014-0196 [35389.414391] LTP: starting cve-2015-0235 (gethostbyname_r01) [35389.444495] LTP: starting cve-2015-7550 (keyctl02) [35393.831873] LTP: starting cve-2016-4470 (keyctl01.sh) [35394.306935] LTP: starting cve-2016-4997 [35394.339884] LTP: starting cve-2016-5195 (dirtyc0w) [35395.416041] LTP: starting cve-2016-7042 [35395.446908] LTP: starting cve-2016-7117 [35508.867774] LTP: starting cve-2016-9604 (keyctl08) [35508.900499] LTP: starting cve-2016-10044 [35509.044379] LTP: starting cve-2017-2618 [35509.074631] LTP: starting cve-2017-2671 [35514.212736] LTP: starting cve-2017-5669 [35514.246465] LTP: starting cve-2017-6951 [35514.279565] LTP: starting cve-2017-7308 (setsockopt02) [35514.468334] LTP: starting cve-2017-7472 (keyctl04) [35514.499488] LTP: starting cve-2017-12192 (keyctl07) [35514.536481] LTP: starting cve-2017-12193 (add_key04) [35514.568432] LTP: starting cve-2017-15274 (add_key02) [35514.599299] LTP: starting cve-2017-15299 (request_key03 -b cve-2017-15299) [35523.796596] LTP: starting cve-2017-15537 (ptrace07) [35523.825007] LTP: starting cve-2017-15951 (request_key03 -b cve-2017-15951) [35533.478648] LTP: starting cve-2017-1000364 (stack_clash)
対応version
コミットログ確認するとcveテストコード追加は、今年の六月からの追加っぽいねw−
$ cd ltp/runtest/ $ tig cve 2017-11-13 14:01 Eric Biggers o syscalls/add_key04: new test for associative array bug 2017-11-06 21:26 Eric Biggers o syscalls/request_key03: new test for key instantiation races 2017-11-02 15:34 Richard Palethorpe o Add test for CVE-2017-7308 on a raw socket's ring buffer 2017-11-01 15:59 Richard Palethorpe o Add test keyctl08 for cve-2016-9604 on keyctl_join_session_keyring 2017-10-19 11:07 Eric Biggers o syscalls/ptrace07: new test for ptrace FPU state corruption 2017-10-19 10:28 Eric Biggers o syscalls/keyctl07: new test for oops when reading negative key 2017-10-12 15:37 Richard Palethorpe o Assign CVE number to add_key02 2017-09-11 13:50 Richard Palethorpe o Test for CVE-2016-10044 mark AIO pseudo-fs noexec 2017-08-31 15:44 Guangwen Feng o Test for CVE-2017-2618 in setprocattr 2017-08-29 11:37 Guangwen Feng o CVE: Add some existing tests to runtest/cve 2017-08-03 13:29 Guangwen Feng o Test for CVE-2016-7042 in /proc/keys show function 2017-07-31 17:46 Eric Biggers o syscalls/keyctl04: new test for thread keyring memory leak 2017-08-08 17:11 Richard Palethorpe o CVE: Add some existing tests to runtest file 2017-07-28 16:01 Pavel Boldin o security/stack_clash: Add new test 2017-07-24 10:53 Richard Palethorpe o Test for CVE-2017-2671 on ping sockets 2017-07-20 12:09 Richard Palethorpe o Test for CVE-2017-5669 in shmat 2017-06-23 14:22 Richard Palethorpe o Test for CVE-2017-6951 in request_key 2017-06-23 14:22 Richard Palethorpe o Test for CVE-2014-0196 PTY echo race 2017-06-23 14:22 Richard Palethorpe I Add CVE .gitignore, Makefile and runtest files
やっぱりOSSは最新に限るよなぁ〜w<b