linux-kernel - Re: [PATCH 3/4] tracing: Fix use-after-free in hist_unreg_all/hist_enable_unreg

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 3 Aug 2016 11:45:13 -0400
From:	Steven Rostedt <rostedt@...dmis.org>
To:	Dmitry Vyukov <dvyukov@...gle.com>
Cc:	LKML <linux-kernel@...r.kernel.org>,
	Linus Torvalds <torvalds@...ux-foundation.org>,
	Ingo Molnar <mingo@...nel.org>,
	Andrew Morton <akpm@...ux-foundation.org>,
	Tom Zanussi <tom.zanussi@...ux.intel.com>
Subject: Re: [PATCH 3/4] tracing: Fix use-after-free in
 hist_unreg_all/hist_enable_unreg_all

On Wed, 3 Aug 2016 16:19:53 +0200
Dmitry Vyukov <dvyukov@...gle.com> wrote:

> On Wed, Aug 3, 2016 at 3:54 PM, Steven Rostedt <rostedt@...dmis.org> wrote:
> > From: Steven Rostedt <rostedt@...dmis.org>
> >
> > While running tools/testing/selftests test suite with KASAN, Dmitry
> > Vyukov hit the following use-after-free report:
> >
> >   ==================================================================
> >   BUG: KASAN: use-after-free in hist_unreg_all+0x1a1/0x1d0 at addr
> >   ffff880031632cc0
> >   Read of size 8 by task ftracetest/7413
> >   ==================================================================
> >   BUG kmalloc-128 (Not tainted): kasan: bad access detected
> >   ------------------------------------------------------------------
> >
> > This fixes the problem, along with the same problem in
> > hist_enable_unreg_all().
> >
> > Link: http://lkml.kernel.org/r/c3d05b79e42555b6e36a3a99aae0e37315ee5304.1467247517.git.tom.zanussi@linux.intel.com
> >
> > Cc: Dmitry Vyukov <dvyukov@...gle.com>  
> 
> s/Cc/Reported-by/ please
> 

Wish you posted that back when this was posted (see Link above).
Because now it's in my git tree and tagged for Linus to pull. Too much
work to rebase for a tag change :-/


-- Steve