lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20190724023452.GW643@sol.localdomain>
Date:   Tue, 23 Jul 2019 19:34:52 -0700
From:   Eric Biggers <ebiggers@...nel.org>
To:     netdev@...r.kernel.org, linux-rdma@...r.kernel.org,
        rds-devel@....oracle.com,
        Santosh Shilimkar <santosh.shilimkar@...cle.com>,
        "David S. Miller" <davem@...emloft.net>,
        Dennis Dalessandro <dennis.dalessandro@...el.com>
Cc:     linux-kernel@...r.kernel.org, syzkaller-bugs@...glegroups.com
Subject: Reminder: 4 open syzbot bugs in "net/rds" subsystem

[This email was generated by a script.  Let me know if you have any suggestions
to make it better, or if you want it re-generated with the latest status.]

Of the currently open syzbot reports against the upstream kernel, I've manually
marked 4 of them as possibly being bugs in the "net/rds" subsystem.  I've listed
these reports below, sorted by an algorithm that tries to list first the reports
most likely to be still valid, important, and actionable.

Of these 4 bugs, 1 was seen in mainline in the last week.

Of these 4 bugs, 1 was bisected to a commit from the following person:

	Dennis Dalessandro <dennis.dalessandro@...el.com>

If you believe a bug is no longer valid, please close the syzbot report by
sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the
original thread, as explained at https://goo.gl/tpsmEJ#status

If you believe I misattributed a bug to the "net/rds" subsystem, please let me
know, and if possible forward the report to the correct people or mailing list.

Here are the bugs:

--------------------------------------------------------------------------------
Title:              general protection fault in rds_recv_rcvbuf_delta
Last occurred:      26 days ago
Reported:           253 days ago
Branches:           Mainline and others
Dashboard link:     https://syzkaller.appspot.com/bug?id=e1d2492507fca6102dbce03c16b40a21130c8dbf
Original thread:    https://lkml.kernel.org/lkml/000000000000445dd9057a7149f1@google.com/T/#u

This bug has a C reproducer.

This bug was bisected to:

	commit b534875d5ab348fb9193692589e2ee82ae768e3a
	Author: Dennis Dalessandro <dennis.dalessandro@...el.com>
	Date:   Wed Jan 6 18:02:59 2016 +0000

	  IB/rdmavt: Add device specific info prints

No one replied to the original thread for this bug.

If you fix this bug, please add the following tag to the commit:
    Reported-by: syzbot+4b4f8163c2e246df3c4c@...kaller.appspotmail.com

If you send any email or patch for this bug, please consider replying to the
original thread.  For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000445dd9057a7149f1@google.com

--------------------------------------------------------------------------------
Title:              memory leak in rds_send_probe
Last occurred:      0 days ago
Reported:           0 days ago
Branches:           Mainline
Dashboard link:     https://syzkaller.appspot.com/bug?id=39b72114839a6dbd66c1d2104522698a813f9ae2
Original thread:    https://lkml.kernel.org/lkml/000000000000ad1dfe058e5b89ab@google.com/T/#u

This bug has a C reproducer.

syzbot has bisected this bug, but I think the bisection result is incorrect.

The original thread for this bug has received 4 replies; the last was 3 hours
ago.

If you fix this bug, please add the following tag to the commit:
    Reported-by: syzbot+5134cdf021c4ed5aaa5f@...kaller.appspotmail.com

If you send any email or patch for this bug, please reply to the original
thread, which had activity only 3 hours ago.  For the git send-email command to
use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply
instructions" at https://lkml.kernel.org/r/000000000000ad1dfe058e5b89ab@google.com

--------------------------------------------------------------------------------
Title:              KASAN: use-after-free Read in rds_cong_queue_updates (2)
Last occurred:      112 days ago
Reported:           365 days ago
Branches:           Mainline and others
Dashboard link:     https://syzkaller.appspot.com/bug?id=6f435350bd496374955b3aeba9e313d16db4b30b
Original thread:    https://lkml.kernel.org/lkml/000000000000cdb5450571adfe40@google.com/T/#u

Unfortunately, this bug does not have a reproducer.

The original thread for this bug received 1 reply, 365 days ago.

If you fix this bug, please add the following tag to the commit:
    Reported-by: syzbot+470ae97a39f16146af45@...kaller.appspotmail.com

If you send any email or patch for this bug, please consider replying to the
original thread.  For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/000000000000cdb5450571adfe40@google.com

--------------------------------------------------------------------------------
Title:              KASAN: slab-out-of-bounds Read in rds_cong_queue_updates (2)
Last occurred:      110 days ago
Reported:           377 days ago
Branches:           Mainline and others
Dashboard link:     https://syzkaller.appspot.com/bug?id=58c0193d54290dfe8266db64b482b0e796f0d611
Original thread:    https://lkml.kernel.org/lkml/0000000000005274c40570be9f48@google.com/T/#u

Unfortunately, this bug does not have a reproducer.

The original thread for this bug received 1 reply, 377 days ago.

If you fix this bug, please add the following tag to the commit:
    Reported-by: syzbot+0570fef57a5e020bdc87@...kaller.appspotmail.com

If you send any email or patch for this bug, please consider replying to the
original thread.  For the git send-email command to use, or tips on how to reply
if the thread isn't in your mailbox, see the "Reply instructions" at
https://lkml.kernel.org/r/0000000000005274c40570be9f48@google.com

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ