netdev - Re: [BUG] net/sched: use after free

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAM_iQpXJOvA0Ok-G=u2dC0jE-J7S1b6bPv-0RvubwZjFTZo_gw@mail.gmail.com>
Date:   Wed, 29 Nov 2017 10:05:46 -0800
From:   Cong Wang <xiyou.wangcong@...il.com>
To:     Eric Dumazet <eric.dumazet@...il.com>
Cc:     netdev <netdev@...r.kernel.org>
Subject: Re: [BUG] net/sched: use after free

On Wed, Nov 29, 2017 at 9:32 AM, Eric Dumazet <eric.dumazet@...il.com> wrote:
> Hi
>
> Running the following script twice gave me a KASAN splat on net tree,
> (this is on commit f6454f80e8a965fca203dab28723f68ec78db608 )
>
>
> ETH=eth0
>
> tc qdisc del dev $ETH ingress 2>/dev/null
> tc qdisc add dev $ETH ingress
>
> tc filter add dev eth0 parent ffff: \
>                matchall action sample rate 12 group 4


I blame tcf_sample_cleanup_rcu(). And clearly it is not netns cleanup
path this time. Let me see how we can fix this.

Thanks for the report!