* Re: KASAN: use-after-free Read in rds_find_bound [not found] <089e08231920353a4805618b365c@google.com> @ 2017-12-30 19:41 ` santosh.shilimkar 2018-02-13 20:12 ` Dmitry Vyukov 0 siblings, 1 reply; 7+ messages in thread From: santosh.shilimkar @ 2017-12-30 19:41 UTC (permalink / raw) To: syzbot, linux-rdma, syzkaller-bugs; +Cc: davem, linux-kernel, netdev, rds-devel On 12/30/17 1:17 AM, syzbot wrote: > Hello, > > syzkaller hit the following crash on > fba961ab29e5ffb055592442808bb0f7962e05da > git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/master > compiler: gcc (GCC) 7.1.1 20170620 > .config is attached > Raw console output is attached. > Unfortunately, I don't have any reproducer for this bug yet. > > > IMPORTANT: if you fix the bug, please add the following tag to the commit: > Reported-by: syzbot+93a5839deb355537440f@syzkaller.appspotmail.com Posted a fix[1] for above issue. Didn't test it but looks straight forward. Regards, Santosh ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: KASAN: use-after-free Read in rds_find_bound 2017-12-30 19:41 ` KASAN: use-after-free Read in rds_find_bound santosh.shilimkar @ 2018-02-13 20:12 ` Dmitry Vyukov 2018-02-14 16:53 ` Santosh Shilimkar 0 siblings, 1 reply; 7+ messages in thread From: Dmitry Vyukov @ 2018-02-13 20:12 UTC (permalink / raw) To: santosh.shilimkar Cc: syzbot, linux-rdma, syzkaller-bugs, David Miller, LKML, netdev, rds-devel On Sat, Dec 30, 2017 at 8:41 PM, santosh.shilimkar@oracle.com <santosh.shilimkar@oracle.com> wrote: > On 12/30/17 1:17 AM, syzbot wrote: >> >> Hello, >> >> syzkaller hit the following crash on >> fba961ab29e5ffb055592442808bb0f7962e05da >> git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/master >> compiler: gcc (GCC) 7.1.1 20170620 >> .config is attached >> Raw console output is attached. >> Unfortunately, I don't have any reproducer for this bug yet. >> >> >> IMPORTANT: if you fix the bug, please add the following tag to the commit: >> Reported-by: syzbot+93a5839deb355537440f@syzkaller.appspotmail.com > > > Posted a fix[1] for above issue. Didn't test it but looks straight > forward. Hi Santosh, What is that fix? You forgot to provide any link/reference. I also don't see any patches from you at around that date... ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: KASAN: use-after-free Read in rds_find_bound 2018-02-13 20:12 ` Dmitry Vyukov @ 2018-02-14 16:53 ` Santosh Shilimkar 2018-02-14 17:14 ` Dmitry Vyukov 0 siblings, 1 reply; 7+ messages in thread From: Santosh Shilimkar @ 2018-02-14 16:53 UTC (permalink / raw) To: Dmitry Vyukov Cc: syzbot, linux-rdma, syzkaller-bugs, David Miller, LKML, netdev, rds-devel On 2/13/2018 12:12 PM, Dmitry Vyukov wrote: > On Sat, Dec 30, 2017 at 8:41 PM, santosh.shilimkar@oracle.com > <santosh.shilimkar@oracle.com> wrote: >> On 12/30/17 1:17 AM, syzbot wrote: >>> >>> Hello, >>> >>> syzkaller hit the following crash on >>> fba961ab29e5ffb055592442808bb0f7962e05da >>> git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/master >>> compiler: gcc (GCC) 7.1.1 20170620 >>> .config is attached >>> Raw console output is attached. >>> Unfortunately, I don't have any reproducer for this bug yet. >>> >>> >>> IMPORTANT: if you fix the bug, please add the following tag to the commit: >>> Reported-by: syzbot+93a5839deb355537440f@syzkaller.appspotmail.com >> >> >> Posted a fix[1] for above issue. Didn't test it but looks straight >> forward. > > > Hi Santosh, > > What is that fix? You forgot to provide any link/reference. I also > don't see any patches from you at around that date... > Fix [1] was later not added since there was a still a race. Wanted to see if the issue re-appears after recent netns fix [2]. Regards, Santosh [1] https://patchwork.kernel.org/patch/10137901/ [2] https://patchwork.ozlabs.org/patch/868902/ ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: KASAN: use-after-free Read in rds_find_bound 2018-02-14 16:53 ` Santosh Shilimkar @ 2018-02-14 17:14 ` Dmitry Vyukov 2018-02-14 17:35 ` Santosh Shilimkar 0 siblings, 1 reply; 7+ messages in thread From: Dmitry Vyukov @ 2018-02-14 17:14 UTC (permalink / raw) To: Santosh Shilimkar Cc: syzbot, linux-rdma, syzkaller-bugs, David Miller, LKML, netdev, rds-devel On Wed, Feb 14, 2018 at 5:53 PM, Santosh Shilimkar <santosh.shilimkar@oracle.com> wrote: >>> On 12/30/17 1:17 AM, syzbot wrote: >>>> >>>> >>>> Hello, >>>> >>>> syzkaller hit the following crash on >>>> fba961ab29e5ffb055592442808bb0f7962e05da >>>> git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/master >>>> compiler: gcc (GCC) 7.1.1 20170620 >>>> .config is attached >>>> Raw console output is attached. >>>> Unfortunately, I don't have any reproducer for this bug yet. >>>> >>>> >>>> IMPORTANT: if you fix the bug, please add the following tag to the >>>> commit: >>>> Reported-by: syzbot+93a5839deb355537440f@syzkaller.appspotmail.com >>> >>> >>> >>> Posted a fix[1] for above issue. Didn't test it but looks straight >>> forward. >> >> >> >> Hi Santosh, >> >> What is that fix? You forgot to provide any link/reference. I also >> don't see any patches from you at around that date... >> > Fix [1] was later not added since there was a still a race. Wanted to > see if the issue re-appears after recent netns fix [2]. We will not see if the bug re-appears or not until this bug is closed. Please see this recent discussion about another rds bug: https://groups.google.com/d/msg/syzkaller-bugs/3XjmOzr5jRU/g7pXIsY1BgAJ In the current state syzbot will never report bugs in these functions again. ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: KASAN: use-after-free Read in rds_find_bound 2018-02-14 17:14 ` Dmitry Vyukov @ 2018-02-14 17:35 ` Santosh Shilimkar 2018-02-14 17:52 ` Dmitry Vyukov 0 siblings, 1 reply; 7+ messages in thread From: Santosh Shilimkar @ 2018-02-14 17:35 UTC (permalink / raw) To: Dmitry Vyukov Cc: syzbot, linux-rdma, syzkaller-bugs, David Miller, LKML, netdev, rds-devel On 2/14/2018 9:14 AM, Dmitry Vyukov wrote: > On Wed, Feb 14, 2018 at 5:53 PM, Santosh Shilimkar > <santosh.shilimkar@oracle.com> wrote: [...] >>> Hi Santosh, >>> >>> What is that fix? You forgot to provide any link/reference. I also >>> don't see any patches from you at around that date... >>> >> Fix [1] was later not added since there was a still a race. Wanted to >> see if the issue re-appears after recent netns fix [2]. > > > We will not see if the bug re-appears or not until this bug is closed. > Please see this recent discussion about another rds bug: > https://groups.google.com/d/msg/syzkaller-bugs/3XjmOzr5jRU/g7pXIsY1BgAJ > In the current state syzbot will never report bugs in these functions again. > OK. Can you close that one then in that case ? ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: KASAN: use-after-free Read in rds_find_bound 2018-02-14 17:35 ` Santosh Shilimkar @ 2018-02-14 17:52 ` Dmitry Vyukov 2018-02-14 17:58 ` Santosh Shilimkar 0 siblings, 1 reply; 7+ messages in thread From: Dmitry Vyukov @ 2018-02-14 17:52 UTC (permalink / raw) To: Santosh Shilimkar Cc: syzbot, linux-rdma, syzkaller-bugs, David Miller, LKML, netdev, rds-devel On Wed, Feb 14, 2018 at 6:35 PM, Santosh Shilimkar <santosh.shilimkar@oracle.com> wrote: >>>> Hi Santosh, >>>> >>>> What is that fix? You forgot to provide any link/reference. I also >>>> don't see any patches from you at around that date... >>>> >>> Fix [1] was later not added since there was a still a race. Wanted to >>> see if the issue re-appears after recent netns fix [2]. >> >> >> >> We will not see if the bug re-appears or not until this bug is closed. >> Please see this recent discussion about another rds bug: >> https://groups.google.com/d/msg/syzkaller-bugs/3XjmOzr5jRU/g7pXIsY1BgAJ >> In the current state syzbot will never report bugs in these functions >> again. >> > OK. Can you close that one then in that case ? Anybody can do this: #syz fix: rds: tcp: use rds_destroy_pending() to synchronize netns/module teardown and rds connection/workq management syzbot provides full self-service, see first email and in particular this: https://github.com/google/syzkaller/blob/master/docs/syzbot.md#communication-with-syzbot Thanks ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: KASAN: use-after-free Read in rds_find_bound 2018-02-14 17:52 ` Dmitry Vyukov @ 2018-02-14 17:58 ` Santosh Shilimkar 0 siblings, 0 replies; 7+ messages in thread From: Santosh Shilimkar @ 2018-02-14 17:58 UTC (permalink / raw) To: Dmitry Vyukov Cc: syzbot, linux-rdma, syzkaller-bugs, David Miller, LKML, netdev, rds-devel On 2/14/2018 9:52 AM, Dmitry Vyukov wrote: > On Wed, Feb 14, 2018 at 6:35 PM, Santosh Shilimkar > <santosh.shilimkar@oracle.com> wrote: >>>>> Hi Santosh, >>>>> >>>>> What is that fix? You forgot to provide any link/reference. I also >>>>> don't see any patches from you at around that date... >>>>> >>>> Fix [1] was later not added since there was a still a race. Wanted to >>>> see if the issue re-appears after recent netns fix [2]. >>> >>> >>> >>> We will not see if the bug re-appears or not until this bug is closed. >>> Please see this recent discussion about another rds bug: >>> https://groups.google.com/d/msg/syzkaller-bugs/3XjmOzr5jRU/g7pXIsY1BgAJ >>> In the current state syzbot will never report bugs in these functions >>> again. >>> >> OK. Can you close that one then in that case ? > > Anybody can do this: > I see. > #syz fix: rds: tcp: use rds_destroy_pending() to synchronize > netns/module teardown and rds connection/workq management > > syzbot provides full self-service, see first email and in particular this: > https://github.com/google/syzkaller/blob/master/docs/syzbot.md#communication-with-syzbot > ok will have a look. Regards, Santosh ^ permalink raw reply [flat|nested] 7+ messages in thread
end of thread, other threads:[~2018-02-14 18:00 UTC | newest]
Thread overview: 7+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
[not found] <089e08231920353a4805618b365c@google.com>
2017-12-30 19:41 ` KASAN: use-after-free Read in rds_find_bound santosh.shilimkar
2018-02-13 20:12 ` Dmitry Vyukov
2018-02-14 16:53 ` Santosh Shilimkar
2018-02-14 17:14 ` Dmitry Vyukov
2018-02-14 17:35 ` Santosh Shilimkar
2018-02-14 17:52 ` Dmitry Vyukov
2018-02-14 17:58 ` Santosh Shilimkar
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®