Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752950AbdLUQ7T (ORCPT ); Thu, 21 Dec 2017 11:59:19 -0500 Received: from aserp2120.oracle.com ([141.146.126.78]:43818 "EHLO aserp2120.oracle.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751838AbdLUQ7R (ORCPT ); Thu, 21 Dec 2017 11:59:17 -0500 Subject: Re: KASAN: stack-out-of-bounds Read in rds_sendmsg To: syzkaller-bugs@googlegroups.com, Avinash Repaka References: <089e08263e589121d90560d610a5@google.com> Cc: syzbot , davem@davemloft.net, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, netdev@vger.kernel.org, rds-devel@oss.oracle.com From: Santosh Shilimkar Organization: Oracle Corporation Message-ID: <9deaf3c4-227f-f6f0-9ccb-3ad05fc32a0c@oracle.com> Date: Thu, 21 Dec 2017 08:44:32 -0800 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.5.0 MIME-Version: 1.0 In-Reply-To: <089e08263e589121d90560d610a5@google.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Proofpoint-Virus-Version: vendor=nai engine=5900 definitions=8752 signatures=668651 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1712210231 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 731 Lines: 23 +Avinash On 12/21/2017 1:10 AM, syzbot wrote: > syzkaller has found reproducer for the following crash on [..] > > audit: type=1400 audit(1513847224.110:7): avc:  denied  { map } for > pid=3157 comm="syzkaller455006" path="/root/syzkaller455006870" > dev="sda1" ino=16481 > scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 > tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 > ================================================================== > BUG: KASAN: stack-out-of-bounds in rds_rdma_bytes net/rds/send.c:1013 > [inline] Could you please post the discussed fix if you are ready with it ? This new report is same as last one and cmesg length check should address it. Regards, Santosh