Re: [Full-disclosure] Trying to send mail to Broadcom

[Tony Naggs <tonynaggs@xxxxxxxxx>]

On 3 May 2013 23:22, Jann Horn <jann@xxxxxxxxx> wrote:
> So, I found a vuln for overwriting kernel memory in kernel code by Broadcom 
> for the
> Raspberry Pi (afaik not in the official kernel sources, just in the patched
> kernel sources for the raspberry pi). It requires you to be in the "video" 
> group,
> so it's not very interesting, I think, but I thought, hey, before you share 
> your
> PoC for causing a kerneloops with FD, maybe you should contact Broadcom and 
> tell
> them so they have a chance to write a fix!

If you didn't make any progress with contacting Broadcom in the
meantime I have a couple of suggestions ...

1. The security@ mailbox gets to the right people at some companies.

2. The main guy behind Rasberry Pi, Eben Upton, works at Broadcom, so
you could ask them for advice on reporting the issue.

Cheers,
Tony

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/