Re: ney/key: slab-out-of-bounds in parse_ipsecrequests

2017-04-18 Thread Steffen Klassert
On Thu, Apr 13, 2017 at 06:35:59PM +0800, Herbert Xu wrote: > On Wed, Apr 12, 2017 at 05:39:22PM -0700, Cong Wang wrote: > > On Wed, Apr 12, 2017 at 8:02 AM, Andrey Konovalov > > wrote: > > > Hi, > > > > > > I've got the following error report while fuzzing the kernel with > > > syzkaller. > > >

Re: ney/key: slab-out-of-bounds in parse_ipsecrequests

2017-04-13 Thread Herbert Xu
On Wed, Apr 12, 2017 at 05:39:22PM -0700, Cong Wang wrote: > On Wed, Apr 12, 2017 at 8:02 AM, Andrey Konovalov > wrote: > > Hi, > > > > I've got the following error report while fuzzing the kernel with syzkaller. > > > > On commit 39da7c509acff13fc8cb12ec1bb20337c988ed36 (4.11-rc6). > > > > A rep

Re: ney/key: slab-out-of-bounds in parse_ipsecrequests

2017-04-12 Thread Cong Wang
On Wed, Apr 12, 2017 at 8:02 AM, Andrey Konovalov wrote: > Hi, > > I've got the following error report while fuzzing the kernel with syzkaller. > > On commit 39da7c509acff13fc8cb12ec1bb20337c988ed36 (4.11-rc6). > > A reproducer and .config are attached. > > When subtracting rq->sadb_x_ipsecrequest