On Thu, 2016-08-04 at 16:11 +0200, Peter Zijlstra wrote: > On Thu, Aug 04, 2016 at 09:45:23AM -0400, Daniel Micay wrote: > > > > Qualcomm's perf driver is out-of-tree along with most of their other > > drivers. > > > So you're asking us to maim upstream perf for some out of tree junk? > Srously? *plonk* This feature doesn't come from Android. The perf events subsystem in the mainline kernel is packed full of vulnerabilities too. The problem is so bad that pointing one of the public fuzzers at it for a short period of time is all that's required to start finding them. Qualcomm's drivers might be lower quality than core kernel code, but they're way above the baseline set by mainline kernel drivers... Shining the same light on mainline drivers wouldn't be pretty. The work going into hardening the Qualcomm drivers isn't happening upstream to any comparable extent.
Attachment:
signature.asc
Description: This is a digitally signed message part
