linux-kernel - Re: 289b7bfd48 BUG: KASAN: slab-out-of-bounds in of_device

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20170228042943.zyt2oqqtwuheki5d@wfg-t540p.sh.intel.com>
Date:   Tue, 28 Feb 2017 12:29:43 +0800
From:   Fengguang Wu <fengguang.wu@...el.com>
To:     Linus Walleij <linus.walleij@...aro.org>
Cc:     Rob Herring <robh+dt@...nel.org>,
        Frank Rowand <frowand.list@...il.com>,
        devicetree@...r.kernel.org,
        Linus Torvalds <torvalds@...ux-foundation.org>,
        LKML <linux-kernel@...r.kernel.org>, linux-gpio@...r.kernel.org,
        LKP <lkp@...org>
Subject: Re: 289b7bfd48 BUG: KASAN: slab-out-of-bounds in of_device_uevent at
 addr ffff880012049289

On Tue, Feb 28, 2017 at 12:24:03PM +0800, Fengguang Wu wrote:
>Hi Linus Walleij,
>
>I'm not sure if this is a good bisect since the merged gpio branch
>suffers from another early hang problem which could hide the KASAN
>BUG. So also OF people are also included in the loop.
>
>The attached reproduce-* script may easily reproduce the bug.
>
>https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
>
>commit 289b7bfd483c8ca3dfde92d7e19a8b70e0b81248
>Merge: 183c948 9b8e3ec
>Author:     Linus Torvalds <torvalds@...ux-foundation.org>
>AuthorDate: Sat Apr 9 13:28:50 2016 -0700
>Commit:     Linus Torvalds <torvalds@...ux-foundation.org>
>CommitDate: Sat Apr 9 13:28:50 2016 -0700
>
>     Merge tag 'gpio-v4.6-3' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio

The below bisect log shows this old bug is still alive in mainline.
Not sure for linux-next because it now suffers from an early boot hang bug.

># extra tests on tree/branch linus/master
>git bisect  bad e5d56efc97f8240d0b5d66c03949382b6d7e5570  # 10:50      0-      3  Merge tag 'watchdog-for-linus-v4.11' of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging
># extra tests on tree/branch linux-next/master
>git bisect good 3e7350242c6f3d41d28e03418bd781cc1b7bad5f  # 01:04     60+     72  Add linux-next specific files for 20170224

Thanks,
Fengguang