Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1220329

Fwd: Use-after-free in page_cache_async_readahead

Show all headers | View raw

On Thu, Sep 3, 2015 at 1:49 PM, Andrey Konovalov <andreyknvl@google.com> wrote:
> On Wed, Sep 2, 2015 at 9:40 PM, Tejun Heo <tj@kernel.org> wrote:
>> Hello, Andrey.
>
> Hello Tejun,
>
>> On Wed, Sep 02, 2015 at 01:08:52PM +0200, Andrey Konovalov wrote:
>>> While running KASAN on 4.2 with Trinity I got the following report:
>>>
>>> ==================================================================
>>> BUG: KASan: use after free in page_cache_async_readahead+0x2cb/0x3f0
>>> at addr ffff880034bf6690
>>> Read of size 8 by task sshd/2571
>>> =============================================================================
>>> BUG kmalloc-16 (Tainted: G        W      ): kasan: bad access detected
>>> -----------------------------------------------------------------------------
>>>
>>> Disabling lock debugging due to kernel taint
>>> INFO: Allocated in bdi_init+0x168/0x960 age=554826 cpu=0 pid=6
>>
>> Can you please verify that the following patch fixes the issue?
>
> I've hit this bug only twice during 24 hours of fuzzing, so there's no
> fast way to verify this.
> I'll be testing with your patch now, and I'll let you know if I hit
> the bug again.

Hello Tejun,

I haven't seen any reports while testing with your patch for the last
few days, so I think it's safe to say that your patch fixes the issue.

Thanks!

>
> Thanks!
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Use-after-free in page_cache_async_readahead Andrey Konovalov <andreyknvl@google.com> - 2015-09-02 13:10 +0200
  Re: Use-after-free in page_cache_async_readahead Tejun Heo <tj@kernel.org> - 2015-09-02 21:50 +0200
    Re: Use-after-free in page_cache_async_readahead Andrey Konovalov <andreyknvl@google.com> - 2015-09-03 13:50 +0200
      Fwd: Use-after-free in page_cache_async_readahead Andrey Konovalov <andreyknvl@google.com> - 2015-09-07 18:50 +0200
        [PATCH block/for-linus] block: don't release bdi while request_queue  has live references Tejun Heo <tj@kernel.org> - 2015-09-08 18:30 +0200
          Re: [PATCH block/for-linus] block: don't release bdi while  request_queue has live references Jan Kara <jack@suse.cz> - 2015-09-15 23:30 +0200

csiph-web