linux-kernel - Re: [syzbot] [fs?] KASAN: use-after-free Read in hpfs_get

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <687c96c2.a70a0220.693ce.00b4.GAE@google.com>
Date: Sun, 20 Jul 2025 00:12:02 -0700
From: syzbot <syzbot+fa88eb476e42878f2844@...kaller.appspotmail.com>
To: linux-kernel@...r.kernel.org, purvayeshi550@...il.com, 
	syzkaller-bugs@...glegroups.com
Subject: Re: [syzbot] [fs?] KASAN: use-after-free Read in hpfs_get_ea

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

fs/hpfs/ea.c:139:54: error: no member named 'ea_off' in 'struct fnode'
fs/hpfs/ea.c:139:70: error: no member named 'ea_size' in 'struct fnode'
fs/hpfs/ea.c:140:41: error: no member named 'name_len' in 'struct extended_attribute'; did you mean 'namelen'?
fs/hpfs/ea.c:143:57: error: no member named 'ea_off' in 'struct fnode'
fs/hpfs/ea.c:143:73: error: no member named 'ea_size' in 'struct fnode'
fs/hpfs/ea.c:146:17: error: no member named 'name_len' in 'struct extended_attribute'; did you mean 'namelen'?
fs/hpfs/ea.c:149:56: error: no member named 'ea_off' in 'struct fnode'
fs/hpfs/ea.c:149:72: error: no member named 'ea_size' in 'struct fnode'
fs/hpfs/ea.c:152:11: error: no member named 'name_len' in 'struct extended_attribute'
fs/hpfs/ea.c:152:23: error: use of undeclared identifier 'aname'
fs/hpfs/ea.c:152:55: error: use of undeclared identifier 'aname'
fs/hpfs/ea.c:153:12: error: no member named 'type' in 'struct extended_attribute'
fs/hpfs/ea.c:154:27: error: no member named 'size' in 'struct extended_attribute'
fs/hpfs/ea.c:154:6: error: use of undeclared identifier 'buffer'
fs/hpfs/ea.c:155:11: error: use of undeclared identifier 'buffer'
fs/hpfs/ea.c:156:13: error: incompatible integer to pointer conversion returning 'int' from a function with result type 'char *' [-Wint-conversion]
fs/hpfs/ea.c:157:50: error: no member named 'size' in 'struct extended_attribute'

Tested on:

commit:         f4a40a42 Merge tag 'efi-fixes-for-v6.16-2' of git://gi..
git tree:       upstream
kernel config:  https://syzkaller.appspot.com/x/.config?x=f09d04131ef56b22
dashboard link: https://syzkaller.appspot.com/bug?extid=fa88eb476e42878f2844
compiler:       Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
patch:          https://syzkaller.appspot.com/x/patch.diff?x=13b084f0580000