linux-kernel - Re: KASAN: slab-out-of-bounds Write in vgacon

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Wed, 29 Jan 2020 23:17:59 +0900
From:   Sergey Senozhatsky <sergey.senozhatsky@...il.com>
To:     anon anon <742991625abc@...il.com>
Cc:     Bartlomiej Zolnierkiewicz <b.zolnierkie@...sung.com>,
        Petr Mladek <pmladek@...e.com>,
        anon anon <742991625abc@...il.com>, wangkefeng.wang@...wei.com,
        syzkaller@...glegroups.com, linux-kernel@...r.kernel.org,
        dri-devel@...ts.freedesktop.org, linux-fbdev@...r.kernel.org,
        Sergey Senozhatsky <sergey.senozhatsky@...il.com>
Subject: Re: KASAN: slab-out-of-bounds Write in vgacon_scroll

On (20/01/29 23:15), Sergey Senozhatsky wrote:
> Date: Wed, 29 Jan 2020 23:15:17 +0900
> From: Sergey Senozhatsky <sergey.senozhatsky@...il.com>
> To: Bartlomiej Zolnierkiewicz <b.zolnierkie@...sung.com>
> Cc: Petr Mladek <pmladek@...e.com>, anon anon <742991625abc@...il.com>,
>  wangkefeng.wang@...wei.com, sergey.senozhatsky@...il.com,
>  syzkaller@...glegroups.com, linux-kernel@...r.kernel.org,
>  dri-devel@...ts.freedesktop.org, linux-fbdev@...r.kernel.org
> Subject: Re: KASAN: slab-out-of-bounds Write in vgacon_scroll
> Message-ID: <20200129141517.GA13721@...dpanzerIV.localdomain>
> 
> On (20/01/28 15:58), Bartlomiej Zolnierkiewicz wrote:
> [..]
> > 
> > Help is welcomed as I'm not going to look at it in the foreseeable future
> > (I'm busy enough with other things).
> > 
> > > (dri-devel@...ts.freedesktop.org or linux-fbdev@...r.kernel.org) into CC?
> > 
> > Added to Cc:, thanks.
> 
> Hmm. There is something strange about it. I use vga console quite
> often, and scrolling happens all the time, yet I can't get the same
> out-of-bounds report (nor have I ever seen it in the past), even with
> the reproducer. Is it supposed to be executed as it is, or are there
> any preconditions? Any chance that something that runs prior to that
> reproducer somehow impacts the system? Just asking.

These questions were addressed to anon anon (742991625abc@...il.com),
not to Bartlomiej.

	-ss