linux-kernel - Re: power9 slab-out-of-bounds in _find_First_zero

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Sat, 25 Jun 2022 01:49:17 +0000
From:   Liam Howlett <liam.howlett@...cle.com>
To:     Nathan Lynch <nathanl@...ux.ibm.com>
CC:     Yury Norov <yury.norov@...il.com>,
        "linuxppc-dev@...ts.ozlabs.org" <linuxppc-dev@...ts.ozlabs.org>,
        "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Subject: Re: power9 slab-out-of-bounds in _find_First_zero_bit

* Nathan Lynch <nathanl@...ux.ibm.com> [220624 19:51]:
> Hi Liam,
> 
> Liam Howlett <liam.howlett@...cle.com> writes:
> >
> > When trying v5.19-rc3 on my ppc64 VM with KASANs enabled, I get the
> > following on boot:
> >
> > [    0.174621] ==================================================================
> > [    0.175501] BUG: KASAN: slab-out-of-bounds in _find_first_zero_bit+0x40/0x140
> > [    0.176132] Read of size 8 at addr c00000000f7f0410 by task swapper/0/1
> > [    0.176900] 
> > [    0.177844] CPU: 0 PID: 1 Comm: swapper/0 Tainted: G        W         5.19.0-rc3+ #8
> > [    0.179461] Call Trace:
> > [    0.179907] [c0000000119677d0] [c0000000075af350] dump_stack_lvl+0x74/0xa8 (unreliable)
> > [    0.181107] [c000000011967810] [c000000000632220] print_report+0x330/0x740
> > [    0.181977] [c0000000119678e0] [c000000000632980] kasan_report+0x100/0x1f0
> > [    0.182788] [c0000000119679c0] [c000000000634de4] __asan_load8+0xa4/0xe0
> > [    0.183560] [c0000000119679e0] [c0000000018b92b0] _find_first_zero_bit+0x40/0x140
> > [    0.184119] [c000000011967a20] [c0000000000c5f7c] xive_spapr_get_ipi+0xcc/0x220
> > [    0.184689] [c000000011967ad0] [c0000000000c1adc] xive_setup_cpu_ipi+0x1ec/0x420
> > [    0.185231] [c000000011967b90] [c00000000a033b3c] pSeries_smp_probe+0x44/0xd4
> > [    0.185825] [c000000011967bc0] [c00000000a01c77c] smp_prepare_cpus+0x62c/0x688
> > [    0.186359] [c000000011967cb0] [c00000000a00ea94] kernel_init_freeable+0x24c/0x520
> > [    0.186893] [c000000011967d90] [c000000000012b00] kernel_init+0x30/0x1c0
> > [    0.187395] [c000000011967e10] [c00000000000ce54] ret_from_kernel_thread+0x5c/0x64
> 
> [...]
> 
> Please try "powerpc/xive/spapr: correct bitmap allocation size", posted yesterday:
> 
> https://lore.kernel.org/linuxppc-dev/20220623182509.3985625-1-nathanl@linux.ibm.com/

Thanks, that works.