Re: UBSAN: array-index-out-of-bounds in arch_uprobe_analyze_insn

2020-12-01 Thread Masami Hiramatsu
Hi Kees, On Tue, 1 Dec 2020 16:48:55 -0800 Kees Cook wrote: > Hi, > > There appears to be a problem with prefix counting for the instruction > decoder. It looks like insn_get_prefixes() isn't keeping "nb" and "nbytes" > in sync correctly: > > while (inat_is_legacy_prefix(attr)) { >

Re: UBSAN: array-index-out-of-bounds in arch_uprobe_analyze_insn

2020-12-01 Thread Kees Cook
Hi, There appears to be a problem with prefix counting for the instruction decoder. It looks like insn_get_prefixes() isn't keeping "nb" and "nbytes" in sync correctly: while (inat_is_legacy_prefix(attr)) { /* Skip if same prefix */ for (i = 0; i < nb; i++)

Re: UBSAN: array-index-out-of-bounds in arch_uprobe_analyze_insn

2020-09-21 Thread syzbot
syzbot has bisected this issue to: commit 4b2bd5fec007a4fd3fc82474b9199af25013de4c Author: John Stultz Date: Sat Oct 8 00:02:33 2016 + proc: fix timerslack_ns CAP_SYS_NICE check when adjusting self bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=1697348d90 start commi