From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751388AbdKUQ1b (ORCPT ); Tue, 21 Nov 2017 11:27:31 -0500 Received: from mx2.suse.de ([195.135.220.15]:35276 "EHLO mx2.suse.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750772AbdKUQ1a (ORCPT ); Tue, 21 Nov 2017 11:27:30 -0500 Date: Tue, 21 Nov 2017 17:27:29 +0100 Message-ID: From: Takashi Iwai To: Andrey Konovalov Cc: Jaroslav Kysela , alsa-devel@alsa-project.org, LKML , Kostya Serebryany , syzkaller , Dmitry Vyukov Subject: Re: [alsa-devel] usb/sound: use-after-free in __uac_clock_find_source In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) SEMI/1.14.6 (Maruoka) FLIM/1.14.9 (=?UTF-8?B?R29qxY0=?=) APEL/10.8 Emacs/25.3 (x86_64-suse-linux-gnu) MULE/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, 21 Nov 2017 14:52:00 +0100, Andrey Konovalov wrote: > > Hi! > > I've got the following report while fuzzing the kernel with syzkaller. > > On commit e1d1ea549b57790a3d8cf6300e6ef86118d692a3 (4.15-rc1). > > This actually looks more like an out-of-bounds with large offset than > a use-after-free due to unrelated alloc and free stack traces. Yes, similar as the previous report, but at this time, it's about the clock selector stuff. Will provide the fix patch, too. thanks, Takashi