netdev - Re: [syzbot] [bpf?] KASAN: stack-out-of-bounds Read in hash

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <e8b52077-f0f2-bfa7-a170-09202c86dd24@huaweicloud.com>
Date: Thu, 16 May 2024 09:35:50 +0800
From: Hou Tao <houtao@...weicloud.com>
To: syzbot <syzbot+9459b5d7fab774cf182f@...kaller.appspotmail.com>,
 bpf@...r.kernel.org
Cc: alexei.starovoitov@...il.com, andrii@...nel.org, ast@...nel.org,
 daniel@...earbox.net, eddyz87@...il.com, haoluo@...gle.com,
 joannekoong@...com, john.fastabend@...il.com, jolsa@...nel.org,
 kpsingh@...nel.org, linux-kernel@...r.kernel.org, martin.lau@...ux.dev,
 netdev@...r.kernel.org, sdf@...gle.com, song@...nel.org,
 syzkaller-bugs@...glegroups.com, yonghong.song@...ux.dev
Subject: Re: [syzbot] [bpf?] KASAN: stack-out-of-bounds Read in hash



On 5/15/2024 11:29 PM, syzbot wrote:
> syzbot has bisected this issue to:
>
> commit 9330986c03006ab1d33d243b7cfe598a7a3c1baa
> Author: Joanne Koong <joannekoong@...com>
> Date:   Wed Oct 27 23:45:00 2021 +0000
>
>     bpf: Add bloom filter map implementation
>
> bisection log:  https://syzkaller.appspot.com/x/bisect.txt?x=1543bd5c980000
> start commit:   443574b03387 riscv, bpf: Fix kfunc parameters incompatibil..
> git tree:       bpf
> final oops:     https://syzkaller.appspot.com/x/report.txt?x=1743bd5c980000
> console output: https://syzkaller.appspot.com/x/log.txt?x=1343bd5c980000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=6fb1be60a193d440
> dashboard link: https://syzkaller.appspot.com/bug?extid=9459b5d7fab774cf182f
> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=13d86795180000
> C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=143eff76180000
>
> Reported-by: syzbot+9459b5d7fab774cf182f@...kaller.appspotmail.com
> Fixes: 9330986c0300 ("bpf: Add bloom filter map implementation")
>
> For information about bisection process see: https://goo.gl/tpsmEJ#bisection
>
> .

#syz fix: bpf: Check bloom filter map value size