Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1578688

Re: net/packet: use-after-free in packet_rcv_fanout

Path csiph.com!1.us.feeder.erje.net!feeder.erje.net!2.eu.feeder.erje.net!border1.nntp.ams1.giganews.com!nntp.giganews.com!news.unit0.net!news.panservice.it!bofh.it!news.nic.it!robomod
From Eric Dumazet <eric.dumazet@gmail.com>
Newsgroups linux.kernel
Subject Re: net/packet: use-after-free in packet_rcv_fanout
Date Fri, 10 Feb 2017 19:30:02 +0100
Message-ID <t9o7g-73R-23@gated-at.bofh.it> (permalink)
References <t8WNH-6CT-5@gated-at.bofh.it> <t98c9-5f1-1@gated-at.bofh.it> <t99UB-6os-3@gated-at.bofh.it> <t9a4i-6rR-9@gated-at.bofh.it> <t9nEd-6Co-9@gated-at.bofh.it> <t9nNT-6VN-19@gated-at.bofh.it> <t9nXA-6ZO-17@gated-at.bofh.it>
Dkim-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=message-id:subject:from:to:cc:date:in-reply-to:references :mime-version:content-transfer-encoding; bh=6h1rfuiQB/Z/uo1osJaQ70iuI6Ddzolw2nf09PqOmP8=; b=PhaXnoCXjOz36MYFVWUKRhk32IZ6dZMvzfM4dIIH40WnVLUSa2wW8CCrD9UfcyvSto Z0XqTSL7gl+kVxHrT6dUkZXMyP7xd0Hx4B5X16YUq26SnRwrnsEj5n52bmo33WlDUsLH eR+kHqqEBpi1Q9ZcXfYiPYMkjNh0uDNRmxhQRNt6/+7TIuTTXjtQboigxJkA7NY8mXgc BQuI16qjwgToHCQ/Xby4ZfpIxbJTLiegITdf+fx7oJDa5j9kow06AQVXnWeZ8hGZxNUl ARlZVUcA9pyBTN8S0QXB6n+5ZCbQTmJF55X3OGrArDC1xQ216dnZdsOmdB8b4YNz3jwj tq6w==
X-Google-Dkim-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:message-id:subject:from:to:cc:date:in-reply-to :references:mime-version:content-transfer-encoding; bh=6h1rfuiQB/Z/uo1osJaQ70iuI6Ddzolw2nf09PqOmP8=; b=tDC+5TyxT61sdPcTeIlqp/hyficjfwJAbaF9C6W1u3oFcL/mTEKwRXfw5Bk2OlYa9S Xjc37nlNn0rgwuSfTA2onDoClGbkgnNqGbU5zPg3xj2t/lSnURqgqU+vxtjYMcasrOpY ItMdJF4bb0cKzRnZQLb3MlSxHh+xYUSY16fVHqCTAAZNvkl30Ue+Q0CI/+2OOpeCYfJK V3biQTYRS35RPqz2ZLVi/oQ3UHnASHXQmVHp0lAXAtc4+dJalqqk/nQoRh+p/XGWdwzP T4BNANlGMnuxINphCT3uncRAvhiK1OXjMofesxJfaWDW1WMj+58M5PG3yfSJaOObrSFh Iizg==
X-Gm-Message-State AMke39mh95ue4GBA7qLLs1mpqw4Jjtq2zaibisVM+EsjUxbyPmS9CpRrAGELuIMFdU7HFA==
X-Received by 10.84.232.10 with SMTP id h10mr13116042plk.121.1486750553460; Fri, 10 Feb 2017 10:15:53 -0800 (PST)
Content-Type text/plain; charset="UTF-8"
X-Mailer Evolution 3.10.4-0ubuntu2
MIME-Version 1.0
Content-Transfer-Encoding 7bit
Sender robomod@news.nic.it
List-ID <linux-kernel.vger.kernel.org>
X-Mailing-List linux-kernel@vger.kernel.org
Approved robomod@news.nic.it
Lines 8
Organization linux.* mail to news gateway
X-Original-Cc Dmitry Vyukov <dvyukov@google.com>, David Miller <davem@davemloft.net>, Willem de Bruijn <willemb@google.com>, Eric Dumazet <edumazet@google.com>, Daniel Borkmann <daniel@iogearbox.net>, jarno@ovn.org, Sowmini Varadhan <sowmini.varadhan@oracle.com>, Philip Pettersson <philip.pettersson@gmail.com>, weongyo.linux@gmail.com, netdev <netdev@vger.kernel.org>, LKML <linux-kernel@vger.kernel.org>, syzkaller <syzkaller@googlegroups.com>
X-Original-Date Fri, 10 Feb 2017 10:15:51 -0800
X-Original-Message-ID <1486750551.7793.153.camel@edumazet-glaptop3.roam.corp.google.com>
X-Original-References <CACT4Y+a2tTARdXKtjtWny9hAPc9b8Q-v8ya3TOV-T+8s=PR2HQ@mail.gmail.com> <CAM_iQpXDwx3=tF4Atu7O+STswdTxLFzzT5-K2bgqtcWcF4aghA@mail.gmail.com> <1486696765.7793.119.camel@edumazet-glaptop3.roam.corp.google.com> <1486697003.7793.121.camel@edumazet-glaptop3.roam.corp.google.com> <CAM_iQpXHktH+Wo7GtJC4afY_Wm11PpKcNFx41f_x4Vs93J-bMA@mail.gmail.com> <1486749566.7793.150.camel@edumazet-glaptop3.roam.corp.google.com> <CAM_iQpV836zWmUY+CSj9ffwn-ng4J96mhNurXVANHd29DX+F_A@mail.gmail.com>
X-Original-Sender linux-kernel-owner@vger.kernel.org
Xref csiph.com linux.kernel:1578688

Show key headers only | View raw


On Fri, 2017-02-10 at 10:02 -0800, Cong Wang wrote:

> I don't have to give a 100% correct patch to prove my explanation
> of the crash. At least it makes more sense than yours...

I will submit it regardless of what you think.

It solves _another_ issue, one of of 10 in af_packet.c

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

net/packet: use-after-free in packet_rcv_fanout Dmitry Vyukov <dvyukov@google.com> - 2017-02-09 14:20 +0100
  Re: net/packet: use-after-free in packet_rcv_fanout Sowmini Varadhan <sowmini.varadhan@oracle.com> - 2017-02-09 16:20 +0100
    Re: net/packet: use-after-free in packet_rcv_fanout Eric Dumazet <edumazet@google.com> - 2017-02-09 16:20 +0100
  Re: net/packet: use-after-free in packet_rcv_fanout Cong Wang <xiyou.wangcong@gmail.com> - 2017-02-10 02:30 +0100
    Re: net/packet: use-after-free in packet_rcv_fanout Eric Dumazet <eric.dumazet@gmail.com> - 2017-02-10 04:20 +0100
      Re: net/packet: use-after-free in packet_rcv_fanout Eric Dumazet <eric.dumazet@gmail.com> - 2017-02-10 04:30 +0100
        Re: net/packet: use-after-free in packet_rcv_fanout Cong Wang <xiyou.wangcong@gmail.com> - 2017-02-10 19:00 +0100
          Re: net/packet: use-after-free in packet_rcv_fanout Eric Dumazet <eric.dumazet@gmail.com> - 2017-02-10 19:10 +0100
            Re: net/packet: use-after-free in packet_rcv_fanout Cong Wang <xiyou.wangcong@gmail.com> - 2017-02-10 19:20 +0100
              Re: net/packet: use-after-free in packet_rcv_fanout Eric Dumazet <eric.dumazet@gmail.com> - 2017-02-10 19:30 +0100
            Re: net/packet: use-after-free in packet_rcv_fanout Eric Dumazet <eric.dumazet@gmail.com> - 2017-02-10 19:20 +0100
              Re: net/packet: use-after-free in packet_rcv_fanout Cong Wang <xiyou.wangcong@gmail.com> - 2017-02-10 19:50 +0100
      Re: net/packet: use-after-free in packet_rcv_fanout Sowmini Varadhan <sowmini.varadhan@oracle.com> - 2017-02-10 04:40 +0100
        Re: net/packet: use-after-free in packet_rcv_fanout Eric Dumazet <edumazet@google.com> - 2017-02-10 05:30 +0100
        Re: net/packet: use-after-free in packet_rcv_fanout Cong Wang <xiyou.wangcong@gmail.com> - 2017-02-10 19:10 +0100
          Re: net/packet: use-after-free in packet_rcv_fanout Sowmini Varadhan <sowmini.varadhan@oracle.com> - 2017-02-10 20:20 +0100

csiph-web