Received: by 2002:a25:23cc:0:0:0:0:0 with SMTP id j195csp591970ybj; Thu, 7 May 2020 03:04:12 -0700 (PDT) X-Google-Smtp-Source: APiQypK+02YCgk9A5n7ZQA5jcASSz8Skx4IvY3Qg7af+CN/8JTvlr1Ui4AkBWUD2CEAD8m0q+79j X-Received: by 2002:a05:6402:2d5:: with SMTP id b21mr10511632edx.291.1588845851861; Thu, 07 May 2020 03:04:11 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1588845851; cv=none; d=google.com; s=arc-20160816; b=U0twGQxjyuO19VSWNbxkfeVBJvo3f2yEpeC6Zx3TXri6Z67/zu6FpHwXZXwreUnHQa Iw7QNREnpw0suduYLgFPRTTkv0zEFUxD7SHwQgo3StjI04FkT7+rQ7pM2GEV7YiXAs6E b6Xptc5RBht7dR5fh7PZ+Hb6pexjIhuufzu6SxNXkz0673hDZCbICr7H/bdSBT3adoRw +pPi2AviHYGH0Lf4cy7p3wKYU5Y1c50/FxaFCyVYFF9/o0Mu1R0puqZKujUZgbf0F+Sz pvJoU6x+OJrACT+V7zu9hddIqRmEJWdlmkZDQR0d/Snl9mKca4t/VdFqHxxwkoHSBHDU ofPg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=P1Be+iELEaGBQtXonCwj1c6TNB0kDNwS6v3vYCB59a0=; b=kvjKUheKrTAHT41CuHk2aH8pDTj/H20OvwS4cWoDCnk6rZ5WbFaEtlVq+hH2l1U0um mBaMdtsBaL203BY/xbwNiq2HO/v7Zor0aKCIAjN7fJQLe9rkXLXoH+V01oESeqyNVU2G V5iFOeeYgxmm5wlhK6RQjERXZXqlhUlSBzExoy9W2iQW6faQ+cqjSddRH9ZFmhV07x24 t4vmdo7sIzU93XmZJ5JMCeirjikUqkvOpFEStxxuT8dZP9HMK7JPNHCSw9GdZ9nkaR3s uhG7akvtQHIkBkfnpg90Mtz2HIeKdam+TgW4zMG6HmkvIHup7buJMVaVxmRQFpdg7bX7 lZ/Q== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=JkHuSfml; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id u4si2690442edo.126.2020.05.07.03.03.48; Thu, 07 May 2020 03:04:11 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=JkHuSfml; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727103AbgEGKBZ (ORCPT + 99 others); Thu, 7 May 2020 06:01:25 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:35324 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-FAIL-OK-FAIL) by vger.kernel.org with ESMTP id S1725879AbgEGKBY (ORCPT ); Thu, 7 May 2020 06:01:24 -0400 Received: from mail-lj1-x242.google.com (mail-lj1-x242.google.com [IPv6:2a00:1450:4864:20::242]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id D14A5C061A10 for ; Thu, 7 May 2020 03:01:23 -0700 (PDT) Received: by mail-lj1-x242.google.com with SMTP id j3so5612362ljg.8 for ; Thu, 07 May 2020 03:01:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=P1Be+iELEaGBQtXonCwj1c6TNB0kDNwS6v3vYCB59a0=; b=JkHuSfml3EgARYC8FMpEd3gAeS1UEfhzcr3L/FFfyBwuVYzu5arGB1JQrQVXCSAx8o dKj87Um3DMpdj2UhEhYv0n8z452mqoRtxpaVW0E/fr1g7tBZfAleLPgSyfvZ6Y7sKaEn rn5SbK5SLZynH8v8mbhmPoALXMC7dpaJJYpjTYAk+CjTcBSjfE7yd8301n7XrNeUxLdr zF1yv/Hc6WbIS26fNfBbnEvCGXAOBRG3RrRvIEc+y993L6zgPv1ojRknB0PiyQIQPbD6 qKGLrrK9SLGbfuLliVSEEOmc+oZcGGnDtpGmfi3YJ9sVVkm8TAMoUAijxsqkJEwajuJY 6/bA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=P1Be+iELEaGBQtXonCwj1c6TNB0kDNwS6v3vYCB59a0=; b=e9rwUcOwpoyCjtwvkNmk6BlvwvSHktHMrzLcb8vlFe9fniBiZoJRC6siC+5hB3YkG+ wUMfX8Gjp9LvVrm4ONTpi/MuCue7nibalxVcRfK2S+G55v3fHNpjOLjMPWEJj4cQ2NOf xoCoRZXOqKt7PFZQWNSoPDxYRmizqwhX18rW2/oghZPVC8LWizLsbHaryOgfNmJ+XNhj I2/lXFR1R6Qj9KrRD9VpLG4UruDGJVb4ubKfVtBMipMcXxjA7Kh1MR4tDgBp1oDt4qrh JOqMDgDr3dItUYqHgwxskUYFRgtzk9YyantXuVndLzi1sakqIQGDCzDbt/Ue4KRqN4Ql VLEA== X-Gm-Message-State: AGi0PuZ7iqKxWka/SheNjgU4Q25TyJH60E3JzZI9neREln21dnjBc+v9 kocaAEkGjxKbPOuQHmSQEdYQxAtI+iufMA4TDXg= X-Received: by 2002:a2e:8949:: with SMTP id b9mr8109025ljk.108.1588845682372; Thu, 07 May 2020 03:01:22 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: butt3rflyh4ck Date: Thu, 7 May 2020 18:01:11 +0800 Message-ID: Subject: Re: KASAN: use-after-free Write in snd_rawmidi_kernel_write1 To: Takashi Iwai Cc: security@kernel.org, syzkaller , tiwai@suse.com, Greg Kroah-Hartman , alsa-devel@alsa-project.org, linux-kernel@vger.kernel.org Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org No, it's not. Regards, butt3rflyh4ck. On Thu, May 7, 2020 at 5:50 PM Takashi Iwai wrote: > > On Thu, 07 May 2020 09:54:34 +0200, > butt3rflyh4ck wrote: > > > > I report a bug (in linux-5.7-rc1) found by syzkaller. > > > > kernel config: > > https://github.com/butterflyhack/syzkaller-fuzz/blob/master/v5.7.0-rc1.config > > reproducer: > > https://github.com/butterflyhack/syzkaller-fuzz/blob/master/repro.cprog > > Is this report different from your another one? > https://lore.kernel.org/r/CAFcO6XMGT42wFBxEa01Ee5Msuecm+WiXnn4rc-VWkC4vTzycPg@mail.gmail.com > > > thanks, > > Takashi