Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1736825

Re: usb/storage/uas: slab-out-of-bounds in uas_probe

From Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Newsgroups linux.kernel
Subject Re: usb/storage/uas: slab-out-of-bounds in uas_probe
Date 2017-09-21 18:20 +0200
Message-ID <uscmJ-3iX-15@gated-at.bofh.it> (permalink)
References <usbK2-2QA-19@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Thu, Sep 21, 2017 at 05:39:05PM +0200, Andrey Konovalov wrote:
> Hi!
> 
> I've got the following report while fuzzing the kernel with syzkaller.
> 
> On commit ebb2c2437d8008d46796902ff390653822af6cc4 (Sep 18).
> 
> The issue occurs when we iterate over interface altsettings, but I
> don't see the driver doing anything wrong. I might be missing
> something, or this might be an issue in USB core altsettings parsing.


Any chance you happen to have the descriptors that you were feeding into
the kernel at this crash?  That might help in figuring out what "went
wrong".

thanks,

greg k-h

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

usb/storage/uas: slab-out-of-bounds in uas_probe Andrey Konovalov <andreyknvl@google.com> - 2017-09-21 17:40 +0200
  Re: usb/storage/uas: slab-out-of-bounds in uas_probe Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2017-09-21 18:20 +0200
  Re: usb/storage/uas: slab-out-of-bounds in uas_probe Alan Stern <stern@rowland.harvard.edu> - 2017-09-21 19:00 +0200
    Re: usb/storage/uas: slab-out-of-bounds in uas_probe Andrey Konovalov <andreyknvl@google.com> - 2017-09-21 19:20 +0200

csiph-web