lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <Y5xuMZn/Ysu2uThj@mit.edu> Date: Fri, 16 Dec 2022 08:10:09 -0500 From: "Theodore Ts'o" <tytso@....edu> To: Jun Nie <jun.nie@...aro.org> Cc: stable@...r.kernel.org, djwong@...nel.org, jack@...e.cz, jlayton@...nel.org, lczerner@...hat.com, linux-ext4@...r.kernel.org, xuyang2018.jy@...itsu.com Subject: Re: [PATCH v1] ext4: Remove deprecated noacl/nouser_xattr options Here is a proper, minmized reproducer which reproduces on upstream, for someone who wants to try to work this bug. On Fri, Dec 16, 2022 at 12:47:16AM -0500, Theodore Ts'o wrote: > Fixing this the clean and proper way, which is by making > ext4_xattr_move_to_block() more intelligent/efficient, is left as an > exercise to the reader. For someone who wants to work the bug, here is a cleaner, properly minimzed, easier-for-humans-to-understand reproducer: #!/bin/bash -vx # # This reproduces an ext4 bug caused by an unfortunate interaction # between lazytime updates happening when a file system is being # unmounted and expand_extra_isize # # Initially discovered via syzkaller: # https://syzkaller.appspot.com/bug?id=3613786cb88c93aa1c6a279b1df6a7b201347d08 # img=/tmp/foo.img dir=/mnt file=$dir/file0 rm -f $img mke2fs -Fq -t ext4 -I 256 -O ea_inode -b 1024 $img 200k mount $img $dir v=$(dd if=/dev/zero bs=2000 count=1 2>/dev/null | tr '\0' =) touch $file attr -q -s test -V $v $file umount $dir mount -o debug_want_extra_isize=128,lazytime /tmp/foo.img $dir cat $file umount $dir
Powered by blists - more mailing lists