From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754111AbdK1TNO (ORCPT ); Tue, 28 Nov 2017 14:13:14 -0500 Received: from mail-io0-f193.google.com ([209.85.223.193]:46710 "EHLO mail-io0-f193.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751350AbdK1TNM (ORCPT ); Tue, 28 Nov 2017 14:13:12 -0500 X-Google-Smtp-Source: AGs4zMYcmQS2jdS9lFGThT5dl9DGLUSk7JhhVVuG+cLVZ+DRrYj6KkqrPC72ZDatpqVtdSSnDuC3mA== Date: Tue, 28 Nov 2017 11:13:08 -0800 From: Eric Biggers To: syzbot Cc: davem@davemloft.net, herbert@gondor.apana.org.au, linux-crypto@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: KASAN: slab-out-of-bounds Write in sha3_final Message-ID: <20171128191308.GD45321@gmail.com> References: <001a11440c809be89b055f0aeea5@google.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <001a11440c809be89b055f0aeea5@google.com> User-Agent: Mutt/1.5.21 (2010-09-15) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Nov 28, 2017 at 05:24:01AM -0800, syzbot wrote: > Hello, > > syzkaller hit the following crash on > 6fc478f80f6809cc4b1a4230f47a62d3b7378dc0 > git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/master > compiler: gcc (GCC) 7.1.1 20170620 > .config is attached > Raw console output is attached. > C reproducer is attached > syzkaller reproducer is attached. See https://goo.gl/kgGztJ > for information about syzkaller reproducers > > > ================================================================== > BUG: KASAN: slab-out-of-bounds in memset include/linux/string.h:326 [inline] > BUG: KASAN: slab-out-of-bounds in sha3_final+0xeb/0x2e0 > crypto/sha3_generic.c:173 > Write of size 4294967223 at addr ffff8801cc23a759 by task > syzkaller163089/3049 #syz dup: KASAN: stack-out-of-bounds Write in sha3_update