From: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
To: YUAN Jia <Jia.Yuan@alcatel-sbell.com.cn>,
'Dmitry Vyukov' <dvyukov@google.com>,
Vlad Yasevich <vyasevich@gmail.com>,
Neil Horman <nhorman@tuxdriver.com>,
"David S. Miller" <davem@davemloft.net>,
"linux-sctp@vger.kernel.org" <linux-sctp@vger.kernel.org>,
netdev <netdev@vger.kernel.org>,
LKML <linux-kernel@vger.kernel.org>,
Eric Dumazet <edumazet@google.com>
Cc: syzkaller <syzkaller@googlegroups.com>,
Kostya Serebryany <kcc@google.com>,
Alexander Potapenko <glider@google.com>,
Sasha Levin <sasha.levin@oracle.com>
Subject: Re: net/sctp: use-after-free in __sctp_connect
Date: Thu, 14 Jan 2016 01:45:45 +0000 [thread overview]
Message-ID: <5696FDC9.6030508@gmail.com> (raw)
In-Reply-To: <07B7943445653648AD9B4DBB916BB48F04FDFD85@cnshjmbx01>
Em 13-01-2016 23:37, YUAN Jia escreveu:
> Hi Dmitry,
>
> I've tested your program, but found nothing happens. So, I suspect it
may cause kernel crash only on some special kernel version?
> I was just using kernel of 4.2.3. What about you?
>
> Richard
Please don't top-post.
Note that it doesn't necessarily crashes the system. syzkaller is using
kasan to detect such type of invalid accesses, which in some conditions
may lead to crashes, weird behavior or just nothing at all. It all
depends on how much the memory was already changed after it was freed.
> -----Original Message-----
> From: linux-sctp-owner@vger.kernel.org
[mailto:linux-sctp-owner@vger.kernel.org] On Behalf Of Dmitry Vyukov
> Sent: 2016年1月13日 17:53
> To: Vlad Yasevich; Neil Horman; David S. Miller;
linux-sctp@vger.kernel.org; netdev; LKML; Eric Dumazet; Marcelo Ricardo
Leitner
> Cc: syzkaller; Kostya Serebryany; Alexander Potapenko; Sasha Levin
> Subject: net/sctp: use-after-free in __sctp_connect
>
...
>
> On commit 03891f9c853d5c4473224478a1e03ea00d70ff8d (Jan 11).
This is the git commit/(version) he was using --^
Marcelo
next prev parent reply other threads:[~2016-01-14 1:45 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-01-13 9:52 net/sctp: use-after-free in __sctp_connect Dmitry Vyukov
2016-01-14 1:37 ` YUAN Jia
2016-01-14 1:45 ` Marcelo Ricardo Leitner [this message]
2016-01-15 19:01 ` Marcelo Ricardo Leitner
2016-01-19 14:38 ` Vlad Yasevich
2016-01-21 17:18 ` Marcelo Ricardo Leitner
2016-01-21 17:37 ` Marcelo Ricardo Leitner
2016-10-19 12:25 ` Andrey Konovalov
2016-10-19 16:57 ` Marcelo Ricardo Leitner
2016-11-02 22:42 ` Andrey Konovalov
2016-11-03 17:11 ` Andrey Konovalov
2016-11-03 17:52 ` Marcelo Ricardo Leitner
2016-11-03 18:02 ` Andrey Konovalov
2016-11-03 18:35 ` Marcelo Ricardo Leitner
2016-11-03 18:45 ` Andrey Konovalov
2016-11-04 12:59 ` Neil Horman
2016-11-04 13:03 ` Marcelo Ricardo Leitner
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5696FDC9.6030508@gmail.com \
--to=marcelo.leitner@gmail.com \
--cc=Jia.Yuan@alcatel-sbell.com.cn \
--cc=davem@davemloft.net \
--cc=dvyukov@google.com \
--cc=edumazet@google.com \
--cc=glider@google.com \
--cc=kcc@google.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-sctp@vger.kernel.org \
--cc=netdev@vger.kernel.org \
--cc=nhorman@tuxdriver.com \
--cc=sasha.levin@oracle.com \
--cc=syzkaller@googlegroups.com \
--cc=vyasevich@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).