Re: usb/media/dtt200u: use-after-free in __dvb_frontend_free

2017-11-07 Thread Andrey Konovalov
On Tue, Nov 7, 2017 at 11:31 AM, Mauro Carvalho Chehab wrote: > Em Mon, 23 Oct 2017 20:58:09 +0200 > Matthias Schwarzott escreveu: > >> Am 23.10.2017 um 16:41 schrieb Andrey Konovalov: >> > Hi! >> > >> > I've got the following report while fuzzing the kernel with syzkaller. >> > >> > On commit 3e

Re: usb/media/dtt200u: use-after-free in __dvb_frontend_free

2017-11-07 Thread Mauro Carvalho Chehab
Em Mon, 23 Oct 2017 20:58:09 +0200 Matthias Schwarzott escreveu: > Am 23.10.2017 um 16:41 schrieb Andrey Konovalov: > > Hi! > > > > I've got the following report while fuzzing the kernel with syzkaller. > > > > On commit 3e0cc09a3a2c40ec1ffb6b4e12da86e98feccb11 (4.14-rc5+). > > > > dvb-usb: fo

Re: usb/media/dtt200u: use-after-free in __dvb_frontend_free

2017-10-24 Thread Andrey Konovalov
On Mon, Oct 23, 2017 at 8:58 PM, Matthias Schwarzott wrote: > Am 23.10.2017 um 16:41 schrieb Andrey Konovalov: >> Hi! >> >> I've got the following report while fuzzing the kernel with syzkaller. >> >> On commit 3e0cc09a3a2c40ec1ffb6b4e12da86e98feccb11 (4.14-rc5+). >> >> dvb-usb: found a 'WideView

Re: usb/media/dtt200u: use-after-free in __dvb_frontend_free

2017-10-23 Thread Matthias Schwarzott
Am 23.10.2017 um 16:41 schrieb Andrey Konovalov: > Hi! > > I've got the following report while fuzzing the kernel with syzkaller. > > On commit 3e0cc09a3a2c40ec1ffb6b4e12da86e98feccb11 (4.14-rc5+). > > dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' > in warm state. > dvb-u

usb/media/dtt200u: use-after-free in __dvb_frontend_free

2017-10-23 Thread Andrey Konovalov
Hi! I've got the following report while fuzzing the kernel with syzkaller. On commit 3e0cc09a3a2c40ec1ffb6b4e12da86e98feccb11 (4.14-rc5+). dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. dvb-usb: bulk message failed: -22 (2/1102416563) dvb-usb: will use the d