netdev - Re: kernel BUG at drivers/android/binder

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <0000000000001a141505853028fd@google.com>
Date:   Thu, 28 Mar 2019 16:46:01 -0700
From:   syzbot <syzbot+f9f3f388440283da2965@...kaller.appspotmail.com>
To:     a@...table.cc, arve@...roid.com, b.a.t.m.a.n@...ts.open-mesh.org,
        christian@...uner.io, davem@...emloft.net,
        devel@...verdev.osuosl.org, gregkh@...uxfoundation.org,
        joel@...lfernandes.org, linux-kernel@...r.kernel.org,
        maco@...roid.com, mareklindner@...mailbox.ch,
        netdev@...r.kernel.org, sw@...onwunderlich.de,
        syzkaller-bugs@...glegroups.com, tkjos@...roid.com,
        tkjos@...gle.com
Subject: Re: kernel BUG at drivers/android/binder_alloc.c:LINE! (3)

syzbot has bisected this bug to:

commit 1a7c3d9bb7a926e88d5f57643e75ad1abfc55013
Author: Todd Kjos <tkjos@...roid.com>
Date:   Fri Feb 8 18:35:14 2019 +0000

     binder: create userspace-to-binder-buffer copy function

bisection log:  https://syzkaller.appspot.com/x/bisect.txt?x=15b9383f200000
start commit:   1a9df9e2 Merge git://git.kernel.org/pub/scm/linux/kernel/g..
git tree:       upstream
final crash:    https://syzkaller.appspot.com/x/report.txt?x=17b9383f200000
console output: https://syzkaller.appspot.com/x/log.txt?x=13b9383f200000
kernel config:  https://syzkaller.appspot.com/x/.config?x=8dcdce25ea72bedf
dashboard link: https://syzkaller.appspot.com/bug?extid=f9f3f388440283da2965
syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=17d05637200000
C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=1677e62f200000

Reported-by: syzbot+f9f3f388440283da2965@...kaller.appspotmail.com
Fixes: 1a7c3d9bb7a9 ("binder: create userspace-to-binder-buffer copy  
function")

For information about bisection process see: https://goo.gl/tpsmEJ#bisection