From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753929AbcGSPbu (ORCPT ); Tue, 19 Jul 2016 11:31:50 -0400 Received: from arcturus.aphlor.org ([188.246.204.175]:39096 "EHLO arcturus.aphlor.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753647AbcGSPbr (ORCPT ); Tue, 19 Jul 2016 11:31:47 -0400 Date: Tue, 19 Jul 2016 11:31:45 -0400 From: Dave Jones To: Alexey Dobriyan Cc: Linux Kernel Subject: Re: 4.7-rc7: use-after-free in proc_map_files_readdir Message-ID: <20160719153145.GA11224@codemonkey.org.uk> Mail-Followup-To: Dave Jones , Alexey Dobriyan , Linux Kernel References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.6.0 (2016-04-01) X-Spam-Flag: skipped (authorised relay user) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Jul 19, 2016 at 02:16:36PM +0300, Alexey Dobriyan wrote: > > BUG: KASAN: use-after-free in proc_map_files_readdir+0x2e3/0x5a0 at addr ffff88044feb2044 > > Just in case can you addr2line this address or post disassembly? http://codemonkey.org.uk/junk/fs_proc_base.dis.txt Which by my math, looks to be.. 7253: 41 8b 87 84 00 00 00 mov 0x84(%r15),%eax info.len = snprintf(info.name, inlined from dir_emit_dots() Dave