linux-kernel - Re: [syzbot] [bluetooth?] KASAN: slab-use-after-free Write in hci_conn

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <000000000000dfd1d2060938b275@google.com>
Date:   Thu, 02 Nov 2023 22:23:04 -0700
From:   syzbot <syzbot+1683f76f1b20b826de67@...kaller.appspotmail.com>
To:     linux-kernel@...r.kernel.org, lizhi.xu@...driver.com,
        syzkaller-bugs@...glegroups.com
Subject: Re: [syzbot] [bluetooth?] KASAN: slab-use-after-free Write in
 hci_conn_drop (2)

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

net/bluetooth/sco.c:81:62: error: no member named 'hci_conn' in 'struct sco_conn'
net/bluetooth/sco.c:81:26: error: no member named 'hci_conn' in 'sco_conn'
net/bluetooth/sco.c:81:20: error: initializing 'struct sco_conn *' with an expression of incompatible type 'void'
net/bluetooth/sco.c:82:7: error: no member named 'hci_conn' in 'struct sco_conn'


Tested on:

commit:         8de1e7af Merge branch 'for-next/core' into for-kernelci
git tree:       git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git
kernel config:  https://syzkaller.appspot.com/x/.config?x=3e6feaeda5dcbc27
dashboard link: https://syzkaller.appspot.com/bug?extid=1683f76f1b20b826de67
compiler:       Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
userspace arch: arm64
patch:          https://syzkaller.appspot.com/x/patch.diff?x=15ec2687680000