netdev - Re: KASAN: slab-out-of-bounds Read in ip6_tnl_parse_tlv_enc

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Tue, 10 Dec 2019 18:11:01 -0400
From:   Jason Gunthorpe <jgg@...pe.ca>
To:     syzbot <syzbot+68dce7caebd8543121de@...kaller.appspotmail.com>
Cc:     akpm@...ux-foundation.org, ast@...nel.org, boqun.feng@...il.com,
        byungchul.park@....com, daniel@...earbox.net, davem@...emloft.net,
        dledford@...hat.com, kernel-team@....com, kirill@...temov.name,
        kuznet@....inr.ac.ru, leon@...nel.org, leonro@...lanox.com,
        linux-kernel@...r.kernel.org, linux-mm@...ck.org,
        linux-rdma@...r.kernel.org, mingo@...nel.org,
        netdev@...r.kernel.org, npiggin@...il.com, parav@...lanox.com,
        peterz@...radead.org, syzkaller-bugs@...glegroups.com,
        tglx@...utronix.de, torvalds@...ux-foundation.org,
        walken@...gle.com, willy@...radead.org, yoshfuji@...ux-ipv6.org
Subject: Re: KASAN: slab-out-of-bounds Read in ip6_tnl_parse_tlv_enc_lim

On Tue, Dec 10, 2019 at 02:08:01PM -0800, syzbot wrote:
> syzbot suspects this bug was fixed by commit:
> 
> commit 30471d4b20335d9bd9ae9b2382a1e1e97d18d86d
> Author: Leon Romanovsky <leonro@...lanox.com>
> Date:   Sun Feb 3 12:55:50 2019 +0000
> 
>     RDMA/core: Share driver structure size with core
> 
> bisection log:  https://syzkaller.appspot.com/x/bisect.txt?x=16b7bb7ae00000
> start commit:   3a5af36b Merge tag '4.19-rc3-smb3-cifs' of git://git.samba..
> git tree:       upstream
> kernel config:  https://syzkaller.appspot.com/x/.config?x=9c4a80625153107e
> dashboard link: https://syzkaller.appspot.com/bug?extid=68dce7caebd8543121de
> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=1068a44e400000
> C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=146386c6400000
> 
> If the result looks correct, please mark the bug fixed by replying with:
> 
> #syz fix: RDMA/core: Share driver structure size with core
> 
> For information about bisection process see: https://goo.gl/tpsmEJ#bisection

Seems pretty unlikely

Jason