linux-kernel - [syzbot] Monthly udf report (Aug 2023)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:   Mon, 07 Aug 2023 05:43:47 -0700
From:   syzbot <syzbot+listb71671ff52af662862e3@...kaller.appspotmail.com>
To:     jack@...e.com, linux-fsdevel@...r.kernel.org,
        linux-kernel@...r.kernel.org, syzkaller-bugs@...glegroups.com
Subject: [syzbot] Monthly udf report (Aug 2023)

Hello udf maintainers/developers,

This is a 31-day syzbot report for the udf subsystem.
All related reports/information can be found at:
https://syzkaller.appspot.com/upstream/s/udf

During the period, 2 new issues were detected and 0 were fixed.
In total, 19 issues are still open and 18 have been fixed so far.

Some of the still happening issues:

Ref Crashes Repro Title
<1> 1068    Yes   WARNING in udf_truncate_extents
                  https://syzkaller.appspot.com/bug?extid=43fc5ba6dcb33e3261ca
<2> 69      Yes   KASAN: use-after-free Write in udf_close_lvid
                  https://syzkaller.appspot.com/bug?extid=60864ed35b1073540d57
<3> 12      Yes   KASAN: use-after-free Read in udf_finalize_lvid
                  https://syzkaller.appspot.com/bug?extid=46073c22edd7f242c028
<4> 5       Yes   WARNING in __udf_add_aext (2)
                  https://syzkaller.appspot.com/bug?extid=e381e4c52ca8a53c3af7
<5> 3       Yes   KASAN: slab-out-of-bounds Write in udf_adinicb_writepage
                  https://syzkaller.appspot.com/bug?extid=a3db10baf0c0ee459854
<6> 1       No    UBSAN: array-index-out-of-bounds in udf_process_sequence
                  https://syzkaller.appspot.com/bug?extid=abb7222a58e4ebc930ad

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@...glegroups.com.

To disable reminders for individual bugs, reply with the following command:
#syz set <Ref> no-reminders

To change bug's subsystems, reply with:
#syz set <Ref> subsystems: new-subsystem

You may send multiple commands in a single email message.