linux-kernel - Re: syzbot dashboard

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 16 Apr 2018 08:55:38 -0700
From:   Randy Dunlap <rdunlap@...radead.org>
To:     Dmitry Vyukov <dvyukov@...gle.com>,
        Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     Eric Biggers <ebiggers3@...il.com>,
        LKML <linux-kernel@...r.kernel.org>,
        syzkaller <syzkaller@...glegroups.com>
Subject: Re: syzbot dashboard

On 04/16/2018 04:15 AM, Dmitry Vyukov wrote:
> On Sat, Apr 14, 2018 at 8:25 PM, Linus Torvalds
> <torvalds@...ux-foundation.org> wrote:
>> Coming back to this now that the merge window is almost over ]
>>
>> On Mon, Mar 26, 2018 at 1:46 AM, Dmitry Vyukov <dvyukov@...gle.com> wrote:
>>>
>>> I've switched emails to links instead of attachments, here are few
>>> recent examples:
>>> https://lkml.org/lkml/2018/3/25/31
>>> https://lkml.org/lkml/2018/3/25/256
>>> https://lkml.org/lkml/2018/3/25/257
>>
>> Looks good to me. I notice that only the last one got any replies, though.
>>
>> I wonder if some people auto-ignore the new reports because of having
>> been burned by the previous "huge illegible emails" issue.
>>
>> I do see syzbot fixes in rdma, though, just not for that
>> cma_listen_on_all issue. So maybe that bug is nastier.
> 
> "possible deadlock in handle_rx" is now marked as fixed with
> "vhost_net: add missing lock nesting notation".
> "KASAN: use-after-free Read in pppol2tp_connect (3)" is marked as
> fixed with "l2tp: fix races in tunnel creation".
> "KASAN: use-after-free Read in __list_add_valid (5)" is still open.
> 
> Though, there are still 182 open bugs on dashboard:
> https://syzkaller.appspot.com/
> 
> 80+ have reproducers and happened last time recently enough. Few
> dozens without reproducers, but as history shows ~2/3 of them are
> fixable. Part of the remaining ones is probably fixed, but nobody told
> syzbot about the fixes. Part is probably still unfixed but happen
> episodically.
> 

https://syzkaller.appspot.com/bug?id=0627d4551fdc39bf1ef5d82cd9eef587047f7718
is fixed by 9ad553abe66f ("fs/reiserfs/journal.c: add missing resierfs_warning() arg"),

which does contain the string:
Reported-by: <syzbot+6bd77b88c1977c03f584@...kaller.appspotmail.com>

Is one of those hex strings incorrect?

-- 
~Randy