Posts
Open post
In reply to
Greg K-H
@gregkh@social.kernel.org
social.kernel.org
@mei Not all that much, "best effort" is fine.
View full thread on social.kernel.org
0
0
0
0
Open post
Greg K-H
@gregkh@social.kernel.org
social.kernel.org
Dear semi-lazyweb,
Given a git diff of a C/Rust codebase, how to best determine which functions/defines have been modified between the two versions? Yes, the diff itself sometimes gives hints as to what has changed, but it's not always correct. Think about when it modifies the start of a function, but the diffstat "name" shows the previous function, a correct marking, but not what is needed.
Is the correct answer really going to be "compile the two versions and compare the AST" or something like that? No "diff library" somewhere that "knows" how to parse C (and Rust) that can do this in a faster way? Surely I'm missing something obvious here...
View on social.kernel.org
Given a git diff of a C/Rust codebase, how to best determine which functions/defines have been modified between the two versions? Yes, the diff itself sometimes gives hints as to what has changed, but it's not always correct. Think about when it modifies the start of a function, but the diffstat "name" shows the previous function, a correct marking, but not what is needed.
Is the correct answer really going to be "compile the two versions and compare the AST" or something like that? No "diff library" somewhere that "knows" how to parse C (and Rust) that can do this in a faster way? Surely I'm missing something obvious here...
0
11
0
0
Open post
Greg K-H
@gregkh@social.kernel.org
social.kernel.org
Posting this link here, as I always have to dig every few years when I need it: https://cdecl.org/ a C -> English translator for those "fun" const pointer to const array issues that you have to work out every so often...
View on social.kernel.org
0
2
0
0
Open post
In reply to
Greg K-H
@gregkh@social.kernel.org
social.kernel.org
Ok, it's now 6, something is odd is happening...
View full thread on social.kernel.org
0
1
0
0
Open post
Greg K-H
@gregkh@social.kernel.org
social.kernel.org
In a few minutes I get interviewed by Shuah Khan and might answer questions from the audience if we have time: https://www.linuxfoundation.org/webinars/lf-live-maintainer-series-my-life-as-a-linux-kernel-developer-and-maintainer-with-greg-kh-and-shuah-khan
It will be recorded for playback later as well. It's part of the great Mentorship video series that Shuah has been putting on for years, the back catalog is deep: https://events.linuxfoundation.org/lf-live-mentorship-series/
View on social.kernel.org
It will be recorded for playback later as well. It's part of the great Mentorship video series that Shuah has been putting on for years, the back catalog is deep: https://events.linuxfoundation.org/lf-live-mentorship-series/
0
0
0
0
Open post
Greg K-H
@gregkh@social.kernel.org
social.kernel.org
We've gotten five different "security reports" about the decades old USBIP protocol https://docs.kernel.org/usb/usbip_protocol.html and how it is "insecure" in the past few days.
Yes, it's only to be run between "trusted" devices, and we will gladly take patches so see the ones recently posted to the linux-usb mailing list to mitigate these issues, but this is very strange as to why all of a sudden this is being reported all at the same time by random different semi-anonymous accounts.
Is there some big usb-over-ip installation somewhere that people suddenly started caring about out there, or did some internal hacking tool that uses usbip just get leaked?
No one who we asked "why?" when they submitting these issues would give a very clear answer to that simple question so something is going on...
View on social.kernel.org
Yes, it's only to be run between "trusted" devices, and we will gladly take patches so see the ones recently posted to the linux-usb mailing list to mitigate these issues, but this is very strange as to why all of a sudden this is being reported all at the same time by random different semi-anonymous accounts.
Is there some big usb-over-ip installation somewhere that people suddenly started caring about out there, or did some internal hacking tool that uses usbip just get leaked?
No one who we asked "why?" when they submitting these issues would give a very clear answer to that simple question so something is going on...
0
12
0
0
Open post
Greg K-H
@gregkh@social.kernel.org
social.kernel.org
After talking with a bunch of different companies / groups, we've now bumped the length of a few of the longterm kernels we are supporting:
https://git.kernel.org/pub/scm/docs/kernel/website.git/commit/?id=d04587da86a3464881e0c97aabddd2c271105698
As always, the dates can be found at:https://www.kernel.org/category/releases.html
View on social.kernel.org
https://git.kernel.org/pub/scm/docs/kernel/website.git/commit/?id=d04587da86a3464881e0c97aabddd2c271105698
As always, the dates can be found at:https://www.kernel.org/category/releases.html
0
0
0
0
Open post
Open post
Greg K-H
@gregkh@social.kernel.org
social.kernel.org
Another post in my series about the kernel CVE process, all about how we classify fixes to be assigned a CVE and other related things:
http://www.kroah.com/log/blog/2026/02/16/linux-cve-assignment-process/
View on social.kernel.org
http://www.kroah.com/log/blog/2026/02/16/linux-cve-assignment-process/
0
0
0
0
Open post
Greg K-H
@gregkh@social.kernel.org
social.kernel.org
Prediction for the potential future:
When the AI coding agent companies are just about to run out of money, down to their last few % raised as none of their customers are actually paying the real cost required to run these services, they pivot and take all of the uploaded code that was willingly sent to them, turn it into thousands of products / services to sell / rent, disconnect the public api endpoints leaving their old customers helpless as they no longer remember how to program "in the raw" and can not understand their own codebases, and compete directly against them putting their own customers all out of business which finally results in a positive income stream and "validation" of the coding agent companies previously over-hyped business valuations.
"But copyright law will prevent this!" you say...
View on social.kernel.org
0
0
0
0