The maintainer has already taken this patch, and it will soon land in mainline and a couple of stable trees. 😃🐧
Here’s a link to the slides and video from my latest presentation at Linux Plumbers Conference, where I discuss the ongoing efforts to globally enable the -Wflex-array-member-not-at-end compiler option in the upstream Linux kernel:
This work aims to eradicate these types of memory corruption vulnerabilities from the kernel once and for all. 😀🙌🏽
Kernel Self-Protection Project ⚔️🛡️🐧
Gustavo A. R. Silva
Gustavo A. R. Silva works full-time as an upstream Linux kernel engineer focused on hardening and proactive security. For nearly a decade, he has worked on fixing a wide variety of bugs and strengthening the Linux kernel's security. His work is supported by The Linux Foundation and the Alpha-Omega project. He is one of the central contributors to the Linux Kernel Self-Protection Project, and a regular speaker at Kernel Recipes and Open Source Summit. He has also presented at Linux Security Summit, Lund LinuxCon, Linux Plumbers Conference, Everything Open, Intl Cryptographic Module Conference (ICMC), The University of Adelaide, and Okayama University. Additionally, he has been an invited speaker at the Symposium sur la Sécurité des Technologies de l'Information et des Communications (SSTIC). View all posts by Gustavo A. R. Silva →