netdev - Re: KASAN: use-after-free Read in rds_tcp_dev

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Tue, 14 Nov 2017 15:26:19 +0100
From:   Dmitry Vyukov <dvyukov@...gle.com>
To:     Sowmini Varadhan <sowmini.varadhan@...cle.com>
Cc:     Girish Moodalbail <girish.moodalbail@...cle.com>,
        syzbot 
        <bot+643ecad3f5bb49700e839363b608c4928f6db8f0@...kaller.appspotmail.com>,
        David Miller <davem@...emloft.net>,
        netdev <netdev@...r.kernel.org>, rds-devel@....oracle.com,
        santosh.shilimkar@...cle.com, syzkaller-bugs@...glegroups.com
Subject: Re: KASAN: use-after-free Read in rds_tcp_dev_event

On Tue, Nov 14, 2017 at 3:04 PM, Dmitry Vyukov <dvyukov@...gle.com> wrote:
> On Tue, Nov 14, 2017 at 2:22 PM, Sowmini Varadhan
> <sowmini.varadhan@...cle.com> wrote:
>>
>>
>> A few questions.
>>
>> - First off, why am I not seeing the original mail in this thread
>>   even when I search the mail archives, e.g.,
>>     https://lkml.org/lkml/2017/11/13/954
>
>
> Good question!
>
> The original message was sent to 4 kernel mailing lists:
>
> ---------- Forwarded message ----------
> From: syzbot <bot+643ecad3f5bb49700e839363b608c4928f6db8f0@...kaller.appspotmail.com>
> Date: Tue, Nov 7, 2017 at 9:28 PM
> Subject: KASAN: use-after-free Read in rds_tcp_dev_event
> To: davem@, linux-kernel@...r.kernel.org, linux-rdma@...r.kernel.org,
> netdev@...r.kernel.org, rds-devel@....oracle.com, santosh.shilimkar@,
> syzkaller-bugs@...glegroups.com
>
> but does not appear to appear on any of them. Only on syzkaller-bugs list:
> https://groups.google.com/d/msg/syzkaller-bugs/nEeIAsNLWL4/1GzamOmRAwAJ
>
> I guess it was bounced for some reason. Does anybody know why it could
> happen with this particular email? Or how to contact mailing list
> owners? LKML faq mentions some Majordomo-owner, but I can't find any
> details.
>
> The email wasn't HTML, no multipart/alternative, no windows encoding,
> subject did not match taboo regexps as subsequent emails appear on the
> lists....
>
> Unfortunately I don't have original (I received a duplicate Message-ID
> from mailing list and my email client decided to store only the dup).
> Here it is:
> https://gist.githubusercontent.com/dvyukov/9b4e19605a80ebd103d94f69631a645c/raw/974891f90ef873a4bf568187c1a85ffe83f50b5a/gistfile1.txt
>
> It indeed contains Mailing-list/List-ID headers which could have been
> bounced. But I have original of another syzbot email received
> directly, it gives idea about original headers and they don't contain
> any mailing list headers:
> https://gist.githubusercontent.com/dvyukov/9034b567ed6a2a88aec4d5cce1a0b2ac/raw/c81b4b4efde0d44983d263e594a1fc746c556607/gistfile1.txt


Humm... I see that another message from syzbot (generated the same
way) did appear on lkml:
https://lkml.org/lkml/2017/11/8/132