Re: net/ipv4: use-after-free in ip_queue_xmit

2017-05-04 Thread Andrey Konovalov
On Mon, Apr 10, 2017 at 7:46 PM, Andrey Konovalov wrote: > On Mon, Apr 10, 2017 at 7:42 PM, Cong Wang wrote: >> On Mon, Apr 10, 2017 at 7:40 AM, Andrey Konovalov >> wrote: >>> Hi, >>> >>> I've got the following error report while fuzzing the kernel with syzkaller. >>> >>> On commit 39da7c509acf

Re: net/ipv4: use-after-free in ip_queue_xmit

2017-04-18 Thread Andrey Konovalov
On Tue, Apr 18, 2017 at 6:05 PM, Cong Wang wrote: > On Tue, Apr 18, 2017 at 5:15 AM, Andrey Konovalov > wrote: >> Yes, I don't have this field in the rtable struct. >> >> I'm on 39da7c509acff13fc8cb12ec1bb20337c988ed36 (4.11-rc6). >> >> I also don't see it in the cross reference: >> http://lxr.f

Re: net/ipv4: use-after-free in ip_queue_xmit

2017-04-18 Thread Cong Wang
On Tue, Apr 18, 2017 at 5:15 AM, Andrey Konovalov wrote: > Yes, I don't have this field in the rtable struct. > > I'm on 39da7c509acff13fc8cb12ec1bb20337c988ed36 (4.11-rc6). > > I also don't see it in the cross reference: > http://lxr.free-electrons.com/source/include/net/route.h#L51 > It is prov

Re: net/ipv4: use-after-free in ip_queue_xmit

2017-04-18 Thread Andrey Konovalov
On Thu, Apr 13, 2017 at 9:59 PM, Cong Wang wrote: > On Thu, Apr 13, 2017 at 11:49 AM, Andrey Konovalov > wrote: >> On Mon, Apr 10, 2017 at 7:46 PM, Andrey Konovalov >> wrote: >>> On Mon, Apr 10, 2017 at 7:42 PM, Cong Wang wrote: On Mon, Apr 10, 2017 at 7:40 AM, Andrey Konovalov wro

Re: net/ipv4: use-after-free in ip_queue_xmit

2017-04-13 Thread Cong Wang
On Thu, Apr 13, 2017 at 11:49 AM, Andrey Konovalov wrote: > On Mon, Apr 10, 2017 at 7:46 PM, Andrey Konovalov > wrote: >> On Mon, Apr 10, 2017 at 7:42 PM, Cong Wang wrote: >>> On Mon, Apr 10, 2017 at 7:40 AM, Andrey Konovalov >>> wrote: Hi, I've got the following error report w

Re: net/ipv4: use-after-free in ip_queue_xmit

2017-04-13 Thread Andrey Konovalov
On Mon, Apr 10, 2017 at 7:46 PM, Andrey Konovalov wrote: > On Mon, Apr 10, 2017 at 7:42 PM, Cong Wang wrote: >> On Mon, Apr 10, 2017 at 7:40 AM, Andrey Konovalov >> wrote: >>> Hi, >>> >>> I've got the following error report while fuzzing the kernel with syzkaller. >>> >>> On commit 39da7c509acf

Re: net/ipv4: use-after-free in ip_queue_xmit

2017-04-10 Thread Andrey Konovalov
On Mon, Apr 10, 2017 at 7:42 PM, Cong Wang wrote: > On Mon, Apr 10, 2017 at 7:40 AM, Andrey Konovalov > wrote: >> Hi, >> >> I've got the following error report while fuzzing the kernel with syzkaller. >> >> On commit 39da7c509acff13fc8cb12ec1bb20337c988ed36 (4.11-rc6). >> >> Unfortunately it's n

Re: net/ipv4: use-after-free in ip_queue_xmit

2017-04-10 Thread Cong Wang
On Mon, Apr 10, 2017 at 7:40 AM, Andrey Konovalov wrote: > Hi, > > I've got the following error report while fuzzing the kernel with syzkaller. > > On commit 39da7c509acff13fc8cb12ec1bb20337c988ed36 (4.11-rc6). > > Unfortunately it's not reproducible. > > BUG: KASAN: use-after-free in ip_select_tt

net/ipv4: use-after-free in ip_queue_xmit

2017-04-10 Thread Andrey Konovalov
Hi, I've got the following error report while fuzzing the kernel with syzkaller. On commit 39da7c509acff13fc8cb12ec1bb20337c988ed36 (4.11-rc6). Unfortunately it's not reproducible. BUG: KASAN: use-after-free in ip_select_ttl include/net/dst.h:176 [inline] at addr 88006ab3602c BUG: KASAN: us