Re: GPF in gf128mul_64k_bbe

2015-12-24 Thread Herbert Xu
On Thu, Dec 17, 2015 at 02:00:23PM +0100, Dmitry Vyukov wrote: > > The following program causes GPF in gf128mul_64k_bbe: This is identical to the lrw_crypt problem you found earlier. Cheers, -- Email: Herbert Xu Home Page: http://gondor.apana.org.au/~herbert/ PGP Key

Re: GPF in gf128mul_64k_bbe

2015-12-21 Thread Stephan Mueller
Am Montag, 21. Dezember 2015, 23:53:14 schrieb Stephan Mueller: Hi, > Am Donnerstag, 17. Dezember 2015, 14:00:23 schrieb Dmitry Vyukov: > > Hi Dmitry, > > > Hello, > > > The following program causes GPF in gf128mul_64k_bbe: > This looks very much like the is

Re: GPF in gf128mul_64k_bbe

2015-12-21 Thread Stephan Mueller
Am Donnerstag, 17. Dezember 2015, 14:00:23 schrieb Dmitry Vyukov: Hi Dmitry, > Hello, > > The following program causes GPF in gf128mul_64k_bbe: This looks very much like the issue you reported for lrw_crypt. > > // autogenerated by syzkaller (http://github.com/google/syzkal

Re: GPF in gf128mul_64k_bbe

2015-12-21 Thread Stephan Mueller
gf128mul_64k_bbe, I see that the NULL pointer deference seems to be triggered *after* the last operation in that function. Can it be that there is some memory corruption in that function where the return pointer is somehow overwritten? > Hello, > > The following program caus

Re: GPF in gf128mul_64k_bbe

2015-12-17 Thread Stephan Mueller
Am Donnerstag, 17. Dezember 2015, 14:00:23 schrieb Dmitry Vyukov: Hi Dmitry, >Hello, > >The following program causes GPF in gf128mul_64k_bbe: thank you very much for the bug reports. I will have a look into them. Ciao Stephan -- To unsubscribe from this list: send the line "uns

GPF in gf128mul_64k_bbe

2015-12-17 Thread Dmitry Vyukov
Hello, The following program causes GPF in gf128mul_64k_bbe: // autogenerated by syzkaller (http://github.com/google/syzkaller) #include #include #include int main() { long r0 = syscall(SYS_socket, 0x26ul, 0x5ul, 0x0ul, 0, 0, 0); long r1 = syscall(SYS_mmap, 0x2000ul