linux-kernel - Re: [syzbot] KASAN: slab-out-of-bounds Read in thrustmaster

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <nycvar.YFH.7.76.2202210914220.11721@cbobk.fhfr.pm>
Date:   Mon, 21 Feb 2022 09:14:45 +0100 (CET)
From:   Jiri Kosina <jikos@...nel.org>
To:     Pavel Skripkin <paskripkin@...il.com>
cc:     syzbot <syzbot+35eebd505e97d315d01c@...kaller.appspotmail.com>,
        alexandre.torgue@...s.st.com, benjamin.tissoires@...hat.com,
        linux-arm-kernel@...ts.infradead.org, linux-input@...r.kernel.org,
        linux-kernel@...r.kernel.org,
        linux-stm32@...md-mailman.stormreply.com,
        mcoquelin.stm32@...il.com, syzkaller-bugs@...glegroups.com
Subject: Re: [syzbot] KASAN: slab-out-of-bounds Read in thrustmaster_probe

On Mon, 21 Feb 2022, Pavel Skripkin wrote:

> >> Looks like missing check for malicious device. Need to check number of
> >> endpoints before accessing endpoints array
> >> 
> >> 
> >> #syz test
> >> git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
> > 
> > Thanks Pavel. Could you please send the patch with proper changelog and
> > SOB my way?
> > 
> 
> I've already posted the patch :) You can find it here [1] (you are in CC of
> course)
> 
> 
> [1] https://lore.kernel.org/all/20220220160114.26882-1-paskripkin@gmail.com/

Hmm, for some reason I don't see it in my inbox, but I'll grab it from the 
ML and apply.

Thanks,

-- 
Jiri Kosina
SUSE Labs