From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752433AbdK3JAC (ORCPT ); Thu, 30 Nov 2017 04:00:02 -0500 Received: from mail-pf0-f179.google.com ([209.85.192.179]:32884 "EHLO mail-pf0-f179.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752042AbdK3I7s (ORCPT ); Thu, 30 Nov 2017 03:59:48 -0500 X-Google-Smtp-Source: AGs4zMY4U0yZN5gukJhNGB+mvvBZ78y7WMAtZz0Hm+7srPYgS4N4hy3wP1+gRftLB+peArbv+AohlQ== Date: Thu, 30 Nov 2017 00:59:44 -0800 From: Eric Biggers To: syzbot Cc: davem@davemloft.net, herbert@gondor.apana.org.au, linux-crypto@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: KASAN: use-after-free Read in blkcipher_walk_virt Message-ID: <20171130085944.GA5451@zzz.localdomain> References: <001a1143d526ebb745055f2f27c1@google.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <001a1143d526ebb745055f2f27c1@google.com> User-Agent: Mutt/1.9.1 (2017-09-22) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Nov 30, 2017 at 12:37:01AM -0800, syzbot wrote: > ================================================================== > BUG: KASAN: use-after-free in crypto_tfm_alg_blocksize > include/linux/crypto.h:671 [inline] > BUG: KASAN: use-after-free in crypto_blkcipher_blocksize > include/linux/crypto.h:1214 [inline] > BUG: KASAN: use-after-free in blkcipher_walk_virt+0x286/0x2a0 > crypto/blkcipher.c:304 > Read of size 8 at addr ffff8801ccba7f38 by task syz-executor5/4473 > #syz dup: KASAN: use-after-free Read in aead_recvmsg