Received: by 2002:ac0:a594:0:0:0:0:0 with SMTP id m20-v6csp3186475imm; Thu, 17 May 2018 04:58:19 -0700 (PDT) X-Google-Smtp-Source: AB8JxZo+G+T8jt2NCmw3pCdOPqX+MVzPMa33TwRA4wTtypjE1eYQFQ4d0zjYxhtnvqdGFyuebdCg X-Received: by 2002:a63:36cc:: with SMTP id d195-v6mr2493135pga.228.1526558299860; Thu, 17 May 2018 04:58:19 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1526558299; cv=none; d=google.com; s=arc-20160816; b=UDzFGuc/mlHZBrZmPjEvgpctQmIz6Zz7jT02GL1GjLGPPP7t8DcfdLkDF6et1/TghP 1fSHM+zcrDn+FSP/1WLszDXZ347aJCVmNt+YJNAmAJzSMSkl9TFrqK6/9mpK8vwR0/LV s6b+s9gmDpHfS06sT5l8o7nI0KHyLY7t8398AY6ydHJ/kV7OGemhV2kVW2zqAFmqIw2N Y8xDLk40SzoqS0Pnxu8CF0hVql2w3IlN/vUAD2TfU1RTuLtxhcrW4d/1yV2K5SLq/fGs ofGohd4iLlUA7xc+EqERCDJWJy6NPQqWQVgELqpfc4U27z/G4SgNw/M7SgiLac5TQCBC 1THQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date:arc-authentication-results; bh=1UOxKSb3fGlg3MsxR6Uv5DlSrLxzsk4cqfBMkhQZB5Y=; b=MsKcnKxoI86zyMKpjl4ftaGgV9382gHKSwqK6M0IWW/4r9pdp50xj8Lxmg+dSjpdH2 S/gLVtFMERBUEJ7/uOIQeHLQCTfBhcyAZ/ux3xcsmpoz78kM/KVdw9+ldfwzgVgRkxRW UIY5S4DuGoIkSMIqKN4rzZRDJxyqhviIfcNtGEAtDUz2tTzZ6UZuBXrlAa5ax/8m/1Lu sh/Z075rOp512lAebKaILUONfeMZ8QdMEMCjKu478MmOEOwY1d+2e/XjLKWw7pbS9VYE 9KRZk2/pibwmMWyNud7SQFvxVdhWYlwx93SF+rfCZW7jz5YfwwajVS7x+upv0mWEMeub ApyQ== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id j3-v6si4802842pld.300.2018.05.17.04.58.05; Thu, 17 May 2018 04:58:19 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751524AbeEQL5z (ORCPT + 99 others); Thu, 17 May 2018 07:57:55 -0400 Received: from mx2.suse.de ([195.135.220.15]:56441 "EHLO mx2.suse.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751047AbeEQL5y (ORCPT ); Thu, 17 May 2018 07:57:54 -0400 X-Virus-Scanned: by amavisd-new at test-mx.suse.de Received: from relay1.suse.de (charybdis-ext.suse.de [195.135.220.254]) by mx2.suse.de (Postfix) with ESMTP id 00B1DABC7; Thu, 17 May 2018 11:57:53 +0000 (UTC) Date: Thu, 17 May 2018 13:57:52 +0200 From: Petr Mladek To: Tetsuo Handa Cc: sergey.senozhatsky.work@gmail.com, dvyukov@google.com, sergey.senozhatsky@gmail.com, syzkaller@googlegroups.com, rostedt@goodmis.org, fengguang.wu@intel.com, linux-kernel@vger.kernel.org, peterz@infradead.org Subject: Re: [PATCH] printk: fix possible reuse of va_list variable Message-ID: <20180517115752.iiatw77riws2vozb@pathway.suse.cz> References: <201805102350.JJH73950.tVJHQLFSOMOOFF@I-love.SAKURA.ne.jp> <20180511014515.GA895@jagdpanzerIV> <201805110238.w4B2cIGH079602@www262.sakura.ne.jp> <20180511062151.GA18160@jagdpanzerIV> <201805112002.GIF21216.OFVHFOMLJtQFSO@I-love.SAKURA.ne.jp> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <201805112002.GIF21216.OFVHFOMLJtQFSO@I-love.SAKURA.ne.jp> User-Agent: NeoMutt/20170421 (1.8.2) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri 2018-05-11 20:02:31, Tetsuo Handa wrote: > >From 766cf72b5fdc00d1cf5a8ca2c6b23ebb75e2b4d4 Mon Sep 17 00:00:00 2001 > From: Tetsuo Handa > Date: Fri, 11 May 2018 19:54:19 +0900 > Subject: [PATCH] printk: fix possible reuse of va_list variable > > I noticed that there is a possibility that printk_safe_log_store() causes > kernel oops because "args" parameter is passed to vsnprintf() again when > atomic_cmpxchg() detected that we raced. Fix this by using va_copy(). Great catch! Reviewed-by: Petr Mladek I have tagged it for stable and pushed into printk.git, branch for-4.18, see https://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk.git/commit/?h=for-4.18&id=988a35f8da1dec5a8cd2788054d1e717be61bf25 Best Regards, Petr