2017-11-03 12:11:09

by Steffen Klassert

[permalink] [raw]
Subject: Re: KASAN: stack-out-of-bounds Read in xfrm_state_find (2)

On Thu, Nov 02, 2017 at 01:25:28PM +0100, Florian Westphal wrote:
> Steffen Klassert <[email protected]> wrote:
>
> > I'd propose to use the addresses from the template unconditionally,
> > like the (untested) patch below does.
> >
> > Unfortunalely the reproducer does not work with my config,
> > sendto returns EAGAIN. Could anybody try this patch?
>
> The reproducer no longer causes KASAN spew with your patch,
> but i don't have a test case that actually creates/uses a tunnel.

The patch passed my standard tests, so I tend apply it
after a day in the ipsec/testing branch.

From 1582957245107214533@xxx Thu Nov 02 12:27:48 +0000 2017
X-GM-THRID: 1582886692223881834
X-Gmail-Labels: Inbox,Category Forums,HistoricalUnread