netdev - memory leak in ip_mc_add_src ( Not tainted 5.8.0-rc3+)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:   Fri, 10 Jul 2020 12:16:40 +0530
From:   cH3332 XR <ch3332xr@...il.com>
To:     netdev@...r.kernel.org
Cc:     syzkaller@...glegroups.com
Subject: memory leak in ip_mc_add_src ( Not tainted 5.8.0-rc3+)

Hi,
SYZKALLER found the following Memory leak

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
BUG: memory leak
unreferenced object 0xffff955412ff9e00 (size 32):
  comm "syz-executor.3", pid 4726, jiffies 4294777846 (age 3098.168s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    06 00 00 00 00 00 00 00 ac 1e 00 04 00 00 00 00  ................
  backtrace:
    [<000000002976d53e>] ip_mc_add_src+0x35f/0x3e0
    [<00000000f22fc984>] ip_mc_source+0x2db/0x4e0
    [<00000000a814b668>] do_ip_setsockopt.isra.14+0x541/0x11c0
    [<0000000071f25adf>] ip_setsockopt+0x33/0xa0
    [<00000000a49ec12e>] udp_setsockopt+0x40/0x90
    [<000000002cc8a42f>] __sys_setsockopt+0x99/0x120
    [<00000000167d1a29>] __x64_sys_setsockopt+0x22/0x30
    [<00000000971d38a0>] do_syscall_64+0x3e/0x70
    [<00000000b19407da>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff955412ff9280 (size 32):
  comm "syz-executor.3", pid 4726, jiffies 4294777846 (age 3098.168s)
  hex dump (first 32 bytes):
    20 0d 77 0c 54 95 ff ff 00 00 00 00 00 00 00 00   .w.T...........
    07 00 00 00 00 00 00 00 ac 1e 00 04 00 01 00 00  ................
  backtrace:
    [<000000002976d53e>] ip_mc_add_src+0x35f/0x3e0
    [<00000000f22fc984>] ip_mc_source+0x2db/0x4e0
    [<00000000a814b668>] do_ip_setsockopt.isra.14+0x541/0x11c0
    [<0000000071f25adf>] ip_setsockopt+0x33/0xa0
    [<00000000a49ec12e>] udp_setsockopt+0x40/0x90
    [<000000002cc8a42f>] __sys_setsockopt+0x99/0x120
    [<00000000167d1a29>] __x64_sys_setsockopt+0x22/0x30
    [<00000000971d38a0>] do_syscall_64+0x3e/0x70
    [<00000000b19407da>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff95540c770d20 (size 32):
  comm "syz-executor.3", pid 27224, jiffies 4297068116 (age 807.903s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    01 00 00 00 00 00 00 00 ac 1e 01 04 00 01 00 00  ................
  backtrace:
    [<00000000a201d800>] ip_mc_add_src+0x1b2/0x3e0
    [<00000000f22fc984>] ip_mc_source+0x2db/0x4e0
    [<00000000a814b668>] do_ip_setsockopt.isra.14+0x541/0x11c0
    [<0000000071f25adf>] ip_setsockopt+0x33/0xa0
    [<00000000a49ec12e>] udp_setsockopt+0x40/0x90
    [<000000002cc8a42f>] __sys_setsockopt+0x99/0x120
    [<00000000167d1a29>] __x64_sys_setsockopt+0x22/0x30
    [<00000000971d38a0>] do_syscall_64+0x3e/0x70
    [<00000000b19407da>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: leak checking failed

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Execute Syzkaller programs
https://github.com/google/syzkaller/blob/master/docs/executing_syzkaller_programs.md

Download attachment "syz.config" of type "application/octet-stream" (129020 bytes)

Download attachment "syzrepro.prog" of type "application/octet-stream" (1911 bytes)