Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1599168

Re: futex: use-after-free in futex_wait_requeue_pi

From Sebastian Andrzej Siewior <bigeasy@linutronix.de>
Newsgroups linux.kernel
Subject Re: futex: use-after-free in futex_wait_requeue_pi
Date 2017-03-13 11:10 +0100
Message-ID <tkv5o-7pV-11@gated-at.bofh.it> (permalink)
References <tjxiW-7Ku-29@gated-at.bofh.it> <tktdg-61U-13@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On 2017-03-13 09:06:20 [+0100], Peter Zijlstra wrote:
> On Fri, Mar 10, 2017 at 07:10:30PM +0100, Dmitry Vyukov wrote:
> > The following program triggers use-after-free in futex_wait_requeue_pi:
> > https://gist.githubusercontent.com/dvyukov/42e596153263793b75ad587c8d0626b0/raw/35461a6c1b0a4163a67191ff5d35202f35ecbf44/gistfile1.txt
> There's a known use-after-free there, see:
> I've not woken up enough; or actually looked at your report to see if
> its the same.

It seems so, yes. The test-case triggered on the commit mentioned in
less than a minute and after the patch applied it runs now for 16
without complains.
A stable tag would be nice then :)

Sebastian

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

futex: use-after-free in futex_wait_requeue_pi Dmitry Vyukov <dvyukov@google.com> - 2017-03-10 19:20 +0100
  Re: futex: use-after-free in futex_wait_requeue_pi Sebastian Andrzej Siewior <bigeasy@linutronix.de> - 2017-03-10 19:40 +0100
    Re: futex: use-after-free in futex_wait_requeue_pi Dmitry Vyukov <dvyukov@google.com> - 2017-03-10 19:40 +0100
  Re: futex: use-after-free in futex_wait_requeue_pi Peter Zijlstra <peterz@infradead.org> - 2017-03-13 09:10 +0100
    Re: futex: use-after-free in futex_wait_requeue_pi Sebastian Andrzej Siewior <bigeasy@linutronix.de> - 2017-03-13 11:10 +0100
      Re: futex: use-after-free in futex_wait_requeue_pi Dmitry Vyukov <dvyukov@google.com> - 2017-03-13 11:10 +0100

csiph-web