Received: by 2002:a05:6358:3188:b0:123:57c1:9b43 with SMTP id q8csp1344169rwd; Thu, 18 May 2023 10:47:41 -0700 (PDT) X-Google-Smtp-Source: ACHHUZ57J1lTmGxDuorQ7eCjB/kLmfutmP+dMJXe1q9Nxa+SX/80WP/7zYkPUbjdzfdpru4MNEQd X-Received: by 2002:a17:90a:3b47:b0:253:2995:f4a6 with SMTP id t7-20020a17090a3b4700b002532995f4a6mr3632355pjf.38.1684432061078; Thu, 18 May 2023 10:47:41 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1684432061; cv=none; d=google.com; s=arc-20160816; b=GNokX6y5nLqA4tBmtcD2C2E1bgO2g2ldEQqyrzQl8A7YoEW8MgbHlFjygtVevT/vss DdgtG9CKJ3Y2H4haNzpw3A88cnxGG1c9K5BZiWC1/pVDFifzpDdWLi3wZ4aWk/TmJUbp +uj/ctURAIlvj88sz1dP1MDALOulTJVJbBBfCjVcCczKb9NtBm38sc4AEXc5Zb4O3l1p Q8mz2dgPBDWT7cfokHfx5TknYwZUS+p2utP7h62h0JBg8FBSs+caagRrT17Loi4USmYl ad04K2OU6NKIR7f4J9Jo7G20AF4McPGi81ZFEg1Ep42pZLxfc0mdiEiJ8NwrNci+3Mmc WLDw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version:date :message-id:subject:references:in-reply-to:cc:to:from:dkim-signature; bh=/5iwx3cW1mfcjMZ9GAY19fYHeqWcnfEvnJx/FGcdY/A=; b=lAB348gMe6RMyWblbVo+hE67/216gn16YvX52p9l1P+XCbviOgp48xDvHTlCu8PKYn mqUR2+0ACUOBLO0rlX2hpgrMkBOQhUxicZZp7rHKkFqf0ncuRx0RU0gJwIR3toTODqgh ywBDyf0VOuNvslLUnRAFWP0O9V+g1KfRSYpTVUmIoRNO0IquoBgc/gSsj6RSCC5F7yUp TMNjBoHw1MuIfn0MS5/wr23w9h8Ipu2wUWb4bIXTv5Os3hN8G2ghhJYlMYZyQ+LKL84z 8A6PfhRdvsbjT/Ayui0o16WBB7GKTtC+IB4Itdhi8yKZ4YBM80l5H4A1WdD8ioZXLrM3 bRuA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=UyCONONY; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id i2-20020a17090a64c200b0024e0254d807si4903527pjm.143.2023.05.18.10.47.28; Thu, 18 May 2023 10:47:41 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=UyCONONY; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229476AbjERRb1 (ORCPT + 99 others); Thu, 18 May 2023 13:31:27 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:59030 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229570AbjERRbZ (ORCPT ); Thu, 18 May 2023 13:31:25 -0400 Received: from dfw.source.kernel.org (dfw.source.kernel.org [139.178.84.217]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 682FD10C3 for ; Thu, 18 May 2023 10:31:07 -0700 (PDT) Received: from smtp.kernel.org (relay.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dfw.source.kernel.org (Postfix) with ESMTPS id 049FE65125 for ; Thu, 18 May 2023 17:31:07 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id 9169EC433D2; Thu, 18 May 2023 17:31:04 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1684431066; bh=+5h/6N8I0UV/l06NAtCmeaQnePCeUKDhjroTzI85C4U=; h=From:To:Cc:In-Reply-To:References:Subject:Date:From; b=UyCONONYRD7xFmaZobBaYzr3h53pKq6TKE/mJ9CLm97V9nCbkH2GSJY5V/wVFuLDU NfoUw1EyeldIQPWq1FDRsvhBgUMAs8zaGHpHbNimdLNUVM8Dt+8Y1Lz6UN7ZQgToZw CEVEuvH+EsPsF4qmI8M8Zb3LyoDcFeyYf/Xk+WWgD1KR5jOGqoMcmq0auvfBeZQrka jxaK+JvOr5wxot37R5ER4ClVdZcoX5MJB0fuNgddNuGj8hc0bCYI6W0dq/G899ejcB SwJGJBM32phimhm5p3ABV0N56nn/nvrmz7U4L3+xGhc0JpFemTh6F4j1VPCxAUpPwG MTOYTKN4msMhA== From: Mark Brown To: Ravulapati Vishnu Vardhan Rao Cc: Srinivas Kandagatla , Banajit Goswami , Liam Girdwood , Jaroslav Kysela , Takashi Iwai , "moderated list:QCOM AUDIO (ASoC) DRIVERS" , open list In-Reply-To: <20230511112532.16106-1-quic_visr@quicinc.com> References: <20230511112532.16106-1-quic_visr@quicinc.com> Subject: Re: [PATCH v2] ASoC:codecs: lpass: Fix for KASAN use_after_free out of bounds Message-Id: <168443106443.480335.16812738995271810180.b4-ty@kernel.org> Date: Fri, 19 May 2023 02:31:04 +0900 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit X-Mailer: b4 0.13-dev-bfdf5 X-Spam-Status: No, score=-7.1 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_HI, SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, 11 May 2023 16:55:32 +0530, Ravulapati Vishnu Vardhan Rao wrote: > When we run syzkaller we get below Out of Bounds error. > > "KASAN: slab-out-of-bounds Read in regcache_flat_read" > > Below is the backtrace of the issue: > > BUG: KASAN: slab-out-of-bounds in regcache_flat_read+0x10c/0x110 > Read of size 4 at addr ffffff8088fbf714 by task syz-executor.4/14144 > CPU: 6 PID: 14144 Comm: syz-executor.4 Tainted: G W > Hardware name: Qualcomm Technologies, Inc. sc7280 CRD platform (rev5+) (DT) > Call trace: > dump_backtrace+0x0/0x4ec > show_stack+0x34/0x50 > dump_stack_lvl+0xdc/0x11c > print_address_description+0x30/0x2d8 > kasan_report+0x178/0x1e4 > __asan_report_load4_noabort+0x44/0x50 > regcache_flat_read+0x10c/0x110 > regcache_read+0xf8/0x5a0 > _regmap_read+0x45c/0x86c > _regmap_update_bits+0x128/0x290 > regmap_update_bits_base+0xc0/0x15c > snd_soc_component_update_bits+0xa8/0x22c > snd_soc_component_write_field+0x68/0xd4 > tx_macro_put_dec_enum+0x1d0/0x268 > snd_ctl_elem_write+0x288/0x474 > > [...] Applied to https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound.git for-next Thanks! [1/1] ASoC:codecs: lpass: Fix for KASAN use_after_free out of bounds commit: 75e5fab7db0cecb6e16b22c34608f0b40a4c7cd1 All being well this means that it will be integrated into the linux-next tree (usually sometime in the next 24 hours) and sent to Linus during the next merge window (or sooner if it is a bug fix), however if problems are discovered then the patch may be dropped or reverted. You may get further e-mails resulting from automated or manual testing and review of the tree, please engage with people reporting problems and send followup patches addressing any issues that are reported if needed. If any updates are required or you are submitting further changes they should be sent as incremental updates against current git, existing patches will not be replaced. Please add any relevant lists and maintainers to the CCs when replying to this mail. Thanks, Mark