netdev - [PATCH ipsec 0/7] xfrm: policy: fix various bugs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20190104131705.9550-1-fw@strlen.de>
Date:   Fri,  4 Jan 2019 14:16:58 +0100
From:   Florian Westphal <fw@...len.de>
To:     steffen.klassert@...unet.com
Cc:     xiyou.wangcong@...il.com, <netdev@...r.kernel.org>
Subject: [PATCH ipsec 0/7] xfrm: policy: fix various bugs

This series addresses various bugs, mostly fallout from the recent
rcu tree work. One is a fix for an older bug coming from the initial
rcu conversion.

There were several xfrm policy related syzbot bugs recently, but
so far only one of them has a reproducer (addressed by patch #4).

As I provided ample rope for syzbot to hang itself with, there is
some chance that this and the other fixes also resolve the KASAN
and UAF syzbot xfrm reports reported in the last couple of days.

My plan is to wait until these patches are applied, and then tell syzbot
for all the open reports that the last patch 'fixes this'.

AFAIU that will make syzbot report the problem again in case it can still
trigger similar splats with these fixes in place.

Florian Westphal (7):
      selftests: xfrm: add block rules with adjacent/overlapping subnets
      xfrm: policy: use hlist rcu variants on inexact insert, part 2
      xfrm: policy: increment xfrm_hash_generation on hash rebuild
      xfrm: policy: delete inexact policies from inexact list on hash rebuild
      xfrm: policy: fix reinsertion on node merge
      selftests: xfrm: alter htresh to trigger move of policies to hash table
      xfrm: policy: fix infinite loop when merging src-nodes

 net/xfrm/xfrm_policy.c                     |   58 +++++-----
 tools/testing/selftests/net/xfrm_policy.sh |  153 ++++++++++++++++++++++++-----
 2 files changed, 160 insertions(+), 51 deletions(-)